Senior Technology Risk & IT Audit Leader

Scorpion Therapeutics; San Diego (CA); On-site; USD 140,000 - 190,000; Full time

Job summary

Scorpion Therapeutics seeks an experienced senior IT/internal auditor to lead and execute audits across technology risk areas, including cybersecurity, cloud, and AI. You will provide strategic oversight, mentor teams, and translate complex technical risks into business terms for management and the Audit Committee.

You will bring 8+ years in IT audit, familiarity with regulatory standards, and hands-on experience with data analytics, Power BI, and SQL.

Qualifications

• 8+ years of progressive experience in IT/internal audit or related fields.
• Public company audit environment and biopharma/regulatory experience preferred.
• 3+ years leading complex engagements and mentoring teams.
• CISA or equivalent preferred; CISSP/CISM/CRISC/CIA/CPA beneficial.
• Familiarity with COBIT, NIST, ISO 27001, COSO, privacy/regulatory requirements.
• Strong communication and stakeholder management.

Responsibilities

• Lead and execute ITGC, cybersecurity, cloud and AI audits end-to-end.
• Provide oversight to ensure high-quality, timely execution.
• Develop actionable audit observations and remediation plans.
• Translate technical risk into business terms for management.
• Monitor remediation and report findings to Audit Committee.
• Advise on data analytics and automated testing adoption.
• Travel up to 20%.

Skills

IT/internal audit

cybersecurity

cloud

AI governance

data analytics

Power BI

SQL

stakeholder management

lead engagements

mentoring teams

COBIT

NIST

COSO

auditing standards

Education

Bachelor’s degree in Information Systems or related

Master’s degree preferred

Tools

Power BI

SQL

Job description

Scorpion Therapeutics seeks an experienced senior IT/internal auditor to lead and execute audits across technology risk areas, including cybersecurity, cloud, and AI. You will provide strategic oversight, mentor teams, and translate complex technical risks into business terms for management and the Audit Committee.

You will bring 8+ years in IT audit, familiarity with regulatory standards, and hands-on experience with data analytics, Power BI, and SQL.