Manager, IT Audit

Biogen, Inc.; Cambridge (MA); Hybrid; USD 109,000 - 146,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

Life Insurance

Fitness & Wellness benefits

Vacation 15 days + year-end shutdown

Holidays 12 + 3 days

Job summary

Biogen, Inc. is seeking a Manager, IT Audit to strengthen technology risk management, cybersecurity posture, and the control environment.

You will own audits from planning to closure, lead complex IT, cybersecurity, cloud, SaaS, and integrated audits, and shape the department's emerging technology agenda including AI/GenAI risk coverage and data analytics automation. You will build relationships with IT, Cyber, and business leaders, mentor team members, and contribute to risk assessment and

Qualifications

• 5+ years of diversified internal and/or external IT audit, IT risk advisory, or cybersecurity audit experience (Big 4 experience preferred).
• Bachelor's degree in Information Systems, Computer Science, Cybersecurity, or a related field.
• Strong knowledge of IT audit methodology, IT General Controls, and cybersecurity control frameworks.
• Excellent communication and project management skills.
• Willingness to travel up to 10% for domestic and international assignments.

Responsibilities

• Lead end-to-end IT, cybersecurity, cloud, SaaS, third-party, and integrated audits from planning through reporting and follow-up.
• Apply a risk-based approach to identify technology and cyber risks and adjust audit scope accordingly.
• Communicate audit results clearly and provide practical remediation recommendations to senior IT, Cyber, and business leadership.
• Develop high-quality audit reports that are concise, clear, and decision oriented.
• Coach and review work of audit team members, co-ops, and external providers.
• Contribute to risk assessment and audit plan with focus on emerging technology risks including AI/GenAI, cloud, and third-party exposures.

Skills

IT audit

IT risk advisory

Cybersecurity audit

Education

Bachelor's degree in Information Systems, Computer Science, Cybersecurity, or related field

Tools

CrowdStrike

Zscaler

Palo Alto

Microsoft Defender

Splunk

AuditBoard

Alteryx

Python

Power BI

Tableau

Job description

About This Role As the Manager, IT Audit at Biogen, you will play a pivotal role in strengthening our technology risk management, cybersecurity posture, and control environment. This position transcends traditional IT audit execution by partnering with leaders across IT, Cyber, and the business to deliver risk-based, practical insights that support informed decision-making and continuous improvement. You will own audit engagements from planning through closure, ensuring audit quality, timeliness, and impactful outcomes. As part of a high-performing Internal Audit team, your responsibilities include leading complex cybersecurity, cloud, SaaS, and integrated IT audits, , and helping shape the department's emerging technology agenda, including AI/GenAI risk coverage and data analytics automation. This role offers an opportunity for professionals seeking to deepen technical audit judgment, gain broad business exposure, and build a foundation for future growth within Internal Audit or the life sciences industry.

What You'll Do: Lead end-to-end IT, cybersecurity, cloud, SaaS, third-party, and integrated audits from planning through reporting and follow-up, with accountability for scope, execution quality, and results. Apply a risk-based approach to identify key technology and cyber risks, evaluate control effectiveness, and adjust audit scope based on emerging issues and insights. Communicate audit results clearly and effectively, including presenting findings and practical remediation recommendations to senior IT, Cyber, and business leadership. Develop high-quality audit reports that are concise, clear, and decision oriented. Build strong, trusted relationships with IT, Cyber, and business leaders while maintaining independence and objectivity. Coach and review work performed by audit team members, co-ops, and external providers, providing actionable feedback and supporting capability development. Contribute to the annual risk assessment and audit plan, with a focus on emerging technology risks including AI/GenAI, cloud, and third-party exposures. Leverage data analytics and AI-enabled tools to enhance risk identification, audit coverage, and efficiency; help advance the department's audit automation agenda. Contribute to departmental strategic initiatives and continuous improvement objectives: including methodology, technology enablement, talent development, and Audit Committee reporting, with opportunities to lead select workstreams. Drive continuous improvement in audit execution, tools, and ways of working within assigned engagements and portfolios.

Who You Are: You are a critical thinker who can navigate ambiguity and articulate technology and cyber risk clearly and effectively. You are comfortable engaging with senior stakeholders, managing difficult conversations, and challenging constructively. Your curiosity, adaptability, and self-motivation drive you to continuously improve how audit delivers value. You possess a strong understanding of IT General Controls, cybersecurity fundamentals, and leading frameworks (NIST, COBIT, ISO 27001, OWASP), with working knowledge of cloud, SaaS, and third-party technology risk.

Required Skills: 5+ years of diversified internal and/or external IT audit, IT risk advisory, or cybersecurity audit experience (Big 4 experience preferred) Bachelor's degree in Information Systems, Computer Science, Cybersecurity, or a related field. Strong knowledge of IT audit methodology, IT General Controls, and cybersecurity control frameworks. Excellent communication and project management skills. Willingness to travel up to 10% for domestic and international assignments.

Preferred Skills: Life Sciences industry experience or relevant technology risk experience outside audit. Master's degree in a related field. Experience with cloud environments (AWS, Azure, GCP), cybersecurity toolsets (e.g., CrowdStrike, Zscaler, Palo Alto, Microsoft Defender, Splunk), AI/GenAI risk frameworks (e.g., NIST AI RMF), audit management platforms (e.g., AuditBoard), Generative AI applications (e.g., Microsoft Copilot), and data analytics / visualization tools (e.g., Alteryx, Python, Microsoft Power BI, Tableau) a plus. CISA, CISSP, or equivalent certification.

#LI-Hybrid Job Level: Management

Additional Information The base compensation range for this role is: $109,000.00-$145,750.00 Base salary offered is determined through an analytical approach utilizing a combination of factors including, but not limited to, relevant skills & experience, job location, and internal equity. Regular employees are eligible to receive both short term and long-term incentives, including cash bonus and equity incentive opportunities, designed to reward recent achievements and recognize your future potential based on individual, business unit and company performance.

In addition to compensation, Biogen offers a full and highly competitive range of benefits designed to support our employees’ and their families physical, financial, emotional, and social well-being; including, but not limited to:

• Medical, Dental, Vision, & Life insurances
• Fitness & Wellness programs including a fitness reimbursement
• Short- and Long-Term Disability insurance
• A minimum of 15 days of paid vacation and an additional end-of-year shutdown time off (Dec 26-Dec 31)
• Up to 12 company paid holidays + 3 paid days off for Personal Significance
• 80 hours of sick time per calendar year
• Paid Maternity and Parental Leave benefit
• 401(k) program participation with company matched contributions
• Employee stock purchase plan
• Tuition reimbursement of up to $10,000 per calendar year
• Employee Resource Groups participation

Why Biogen? We are a global team with a commitment to excellence, and a pioneering spirit. As a mid-sized biotechnology company, we provide the stability and resources of a well-established business while fostering an environment where individual contributions make a significant impact. Our team encompasses some of the most talented and passionate achievers who have unparalleled opportunities for learning, growth, and expanding their skills. Above all, we work together to deliver life-changing medicines, with every role playing a vital part in our mission. Caring Deeply. Achieving Excellence. Changing Lives.

All qualified applicants will receive consideration for employment without regard to sex, gender identity or expression, sexual orientation, marital status, race, color, national origin, ancestry, ethnicity, religion, age, veteran status, disability, genetic information or any other basis protected by federal, state or local law.

Biogen is an E-Verify Employer in the United States.