Sr. IT Corporate Audit Manager

Scorpion Therapeutics; San Diego (CA); On-site; USD 140,000 - 190,000; Full time

Job summary

Scorpion Therapeutics seeks an experienced senior IT/internal auditor to lead and execute audits across technology risk areas, including cybersecurity, cloud, and AI. You will provide strategic oversight, mentor teams, and translate complex technical risks into business terms for management and the Audit Committee.

You will bring 8+ years in IT audit, familiarity with regulatory standards, and hands-on experience with data analytics, Power BI, and SQL.

Qualifications

• 8+ years of progressive experience in IT/internal audit or related fields.
• Public company audit environment and biopharma/regulatory experience preferred.
• 3+ years leading complex engagements and mentoring teams.
• CISA or equivalent preferred; CISSP/CISM/CRISC/CIA/CPA beneficial.
• Familiarity with COBIT, NIST, ISO 27001, COSO, privacy/regulatory requirements.
• Strong communication and stakeholder management.

Responsibilities

• Lead and execute ITGC, cybersecurity, cloud and AI audits end-to-end.
• Provide oversight to ensure high-quality, timely execution.
• Develop actionable audit observations and remediation plans.
• Translate technical risk into business terms for management.
• Monitor remediation and report findings to Audit Committee.
• Advise on data analytics and automated testing adoption.
• Travel up to 20%.

Skills

IT/internal audit

cybersecurity

cloud

AI governance

data analytics

Power BI

SQL

stakeholder management

lead engagements

mentoring teams

COBIT

NIST

COSO

auditing standards

Education

Bachelor’s degree in Information Systems or related

Master’s degree preferred

Tools

Power BI

SQL

Job description

Your Contributions (include, But Are Not Limited To)

• Lead and execute audit and advisory engagements end-to-end (ITGC, automated application controls, cybersecurity, cloud, AI and other technology areas), including scoping, testing, reporting, and remediation follow-up.
• Provide functional oversight to ensure high-quality, timely execution; set expectations, give feedback, and coach teams (internal, co-sourced, or hybrid); operate strategically and hands-on.
• Develop actionable audit/advisory observations and reports; analyze root causes and business impact; recommend right-sized remediation.
• Build relationships with technology/business leaders; translate technical risks into business terms for management and audit leadership.
• Monitor/validate remediation of audit action items; identify trends; elevate overdue/high-risk matters; support reporting to management/Audit Committee.
• Serve as a technology-risk functional expert; advise colleagues and integrate technology risks into broader audits; develop tools, practical guidance, and training.
• Advance adoption of data analytics, automated testing, continuous monitoring, and responsible AI-enabled audit methods.
• Provide technology-risk expertise for enterprise risk assessment and annual audit planning; evaluate tech strategy, cyber threats, regulatory expectations, incidents, and third-party dependencies.
• Anticipate/monitor emerging business, regulatory, technology, and risk trends and incorporate insights into planning.
• Travel up to 20%.

Requirements

• Bachelor’s degree (Information Systems, CS, Cybersecurity, Accounting, Finance, Business, or related) + 8+ years progressive experience in IT/internal audit (technology risk/cybersecurity), public accounting, or consulting OR Master’s degree + 6+ years.
• Public company audit environment required; biopharma/highly regulated industry strongly preferred; Big 4 and international experience plus.
• 3+ years leading complex engagements and coaching/mentoring teams (including direct reports/co-source partners).
• CISA or equivalent strongly preferred; CISSP, CISM, CRISC, CIA, CPA, and cloud/security credentials plus.
• Familiarity with internal audit standards and frameworks (COBIT, NIST, ISO 27001, COSO, privacy/regulatory requirements).
• Strong knowledge of technology risk domains (cybersecurity, cloud, IAM, ITGC, automated application controls, SDLC, resiliency/DR, data governance/privacy, third-party risk, AI governance, enterprise systems).
• Ability to independently lead complex cross-functional audits; exercise judgment; manage priorities/resources/schedules; drive continuous improvement.
• Advanced analytical and judgment skills; exceptional written/verbal communication and influencing.
• Experience with data analytics/visualization/automation/GRC or audit platforms; Power BI/SQL and AI-enabled audit solutions plus.
• Travel up to 20%.