IT Audit Manager

Job Description

General Summary:

The IT Audit Manager leads the planning, execution, and reporting of IT internal audits to evaluate the effectiveness of technology governance, risk management, and internal control practices. This role ensures continuous improvement of IT controls in alignment with organizational objectives and risk tolerance, regulatory requirements, and industry best practice frameworks. The role will have supervisory responsibility for audit staff supporting assigned audit engagements. This position requires a strong understanding of audit methodologies, risk management concepts, IT systems, cybersecurity, data privacy (GDPR), and relevant IT internal control frameworks (NIST-CSF, ITIL, COBIT, etc.).

Key Duties and Responsibilities:

• Responsible for successful end-to-end delivery of IT audit engagements from planning through reporting and resolution follow-up
• Ensures audit engagements are completed on schedule and in accordance with professional standards
• Partners with business and IT stakeholders to understand processes and systems under review and identify potential risks
• Develops risk-based audit scopes and test plans to evaluate the design and operating effectiveness of IT controls
• Manages audit fieldwork including testing activities and auditee communications
• Identifies and communicates audit observations that deliver valuable insights on opportunities to improve the Company's technology control environment
• Recommends practical solutions to remediate control gaps
• Oversees audit staff and manages workpaper file to ensure audit quality
• Contributes to development of the annual audit plan and other department initiatives as assigned
• May be required to support testing of IT SOX controls

Knowledge and Skills:

• Excellent organizational and project management skills
• Excellent written and verbal communication skills
• Detail oriented, able to multitask and meet deadlines
• Able to operate independently under general supervision and work collaboratively with diverse teams
• Able to analyze process workflows and identify risks and control gaps
• Proficient in use of data analytics to support risk-based audit testing

Education and Experience:

• Bachelor's degree in Information Systems, Finance, Accounting, or related field (Master's degree a plus)
• Relevant professional certification required (CPA, CISA, CISSP, CRISC or similar)
• 5+ years of relevant experience in IT audit, IT risk management, or related field
• "Big 4" or large accounting or consulting firm experience considered a plus
• Pharmaceutical / Life Sciences industry experience considered a plus

#HYBRID

#LI-MF1

Pay Range:

Disclosure Statement:

Flex Designation:

Flex Eligibility Status:

In this Hybrid-Eligible role, you can choose to be designated as:
1. Hybrid: work remotely up to two days per week; or select
2. On-Site: work five days per week on-site with ad hoc flexibility.

Note: The Flex status for this position is subject to Vertex's Policy on Flex @ Vertex Program and may be changed at any time.

#LI-Hybrid

Company Information

Vertex is a global biotechnology company that invests in scientific innovation.

Vertex is committed to equal employment opportunity and non-discrimination for all employees and qualified applicants without regard to a person's race, color, sex, gender identity or expression, age, religion, national origin, ancestry, ethnicity, disability, veteran status, genetic information, sexual orientation, marital status, or any characteristic protected under applicable law. Vertex is an E-Verify Employer in the United States. Vertex will make reasonable accommodations for qualified individuals with known disabilities, in accordance with applicable law.

Any applicant requiring an accommodation in connection with the hiring process and/or to perform the essential functions of the position for which the applicant has applied should make a request to the recruiter or hiring manager, or contact Talent Acquisition at ApplicationAssistance@vrtx.com