Job Description
Our company's Information Technology division partners with colleagues from across the business to help serve our patients and customers around the world. We are a high-energy team of dynamic, innovative individuals dedicated to leveraging information and technology to efficiently drive revenue and productivity, thereby advancing our company's contribution to global medical innovation.
Job Description:
The Associate Director, IT SOX Program Manager plays a key role within the IT Risk & Compliance Programs function.
Responsible for the end-to-end oversight of the IT SOX program, the IT SOX Program Manager drives the program's strategy, delivery, and execution for one of our company's most critical compliance programs.
The individual partners cross-functionally with divisions across the company to proactively facilitate the identification, prioritization, and mitigation of risks impacting the IT SOX landscape. These functions are performed independently and at a high level of achievement.
Responsibilities
- Lead the IT SOX PMO to execute various aspects of the program including planning, scoping, and execution.
- Assist with SOX risk assessments, system scoping, and designing IT processes and controls to mitigate financial reporting risks.
- Collaborate closely with the Global Controllers Office, process owners, Internal Audit, external auditors, Level 2 monitoring, and other key stakeholders to understand IT processes, risks, and controls relating to Identity and Access Management, Privileged Access Management, SDLC, and IT Operations.
- Advise on SOX control readiness for new initiatives, system deployments, automation projects, and other IT-related changes.
- Assist with SOX documentation and related activities, such as reviewing and updating process flowcharts, pre-reviewing control evidence, and providing guidance/advisory to control owners on whether the evidence is complete and fit for purpose.
- Monitor IT SOX testing with the identification and documentation of IT SOX Controls in coordination with the SOX PMO Global Controllers office.
- Evaluate control deficiencies, assess root causes and impacts, and recommend remediation activities, ensuring that remediation items are addressed according to the established plan.
- Execute and monitor key IT SOX campaigns, including the Quarterly SOX Survey, User Access Reviews, and Database Activity Monitoring.
- Prepare and present content and materials to SOX oversight committees.
- Lead the creation of an on-demand IT SOX education tool, incorporating company-specific customizations and updates based on organizational risks, and track mandatory annual training for IT SOX control owners.
- Formalize and own the SOP for the IT SOX Program in line with our company's policies and standards.
- Identify opportunities to improve the IT SOX Program through optimization and automation.
Desired Education Level:
- Bachelor’s degree required
Required Experience and Skills:
- Above 8 years of relevant experience, including Process and Information Technology auditing, focused on internal control reviews around IT SOX, IT General Controls, IT application controls (ITACs), and business risks and controls.
- Strong knowledge of internal control frameworks and standards, such as US GAAP, COSO, and SOX.
- Effective project management and organizational skills, and ability to plan and manage multiple projects and tasks simultaneously.
- Excellent interpersonal skills, including the ability to work closely with people at all levels of the organization and facilitate the implementation of corrective actions.
- Experience with executive-level presentation preparation and delivery, including persuasive written and visual communications skills in various settings from management presentations to one-on-ones.
- Demonstrated success within a matrix organization where strong leadership, influence, and collaboration are essential to enlist support and commitment from peers.
- Ability to work effectively with a variety of different leadership personalities, as well as to work in ambiguity, problem solve, and make rapid/disciplined decisions.
- Ability to balance strategic thinking with effective, timely execution and delivery.
- Confidence to challenge the status quo and raise questions, risks, and issues.
- High standard of ethics discipline and professionalism.
- Proficient in managing virtual engagements and workshops with international stakeholders.
- Ability to attend in-person meetings, as this position will require periodic on-site attendance as needed.
Preferred Experience and Skills:
- Professional credentials including CPA, CISA, MIIA, CIA, or equivalent certifications.
- Experience operating in a highly regulated environment such as health care or finance.
- Broad understanding of end-to-end company operations and organizational structure including research and development, manufacturing, commercial operations, financial processes, & IT.