Senior Analyst for IT Application and General Controls

About the role

Main responsibilities

• Execute ITAC and ITGC testing for SOX, CSRD, Digital SOX, and high-risk control scopes.
• Test IT Dependent controls, automated controls, key reports, interfaces, User Access Management, and Segregation of Duties.
• Analyze SOC reports and coordinate with auditors, control owners, and system control leads.
• Review applications, infrastructure, third parties, prior-year results, and Sanofi methodology.
• Conduct walkthroughs and interviews, request evidence, and monitor testing timelines and issues.
• Document testing and identify automation and continuous-improvement opportunities.
• Coordinate the CSA campaign and track process-owner completion and sign-off.

Experience and education

• At least 2 years of relevant IT audit experience in SOX ITAC and ITGC audit.
• Demonstrated knowledge of SOX compliance and testing methodologies.
• Experience with SOC report analysis, PCAOB requirements, accounting or financial reporting, and CSRD.
• Experience with IT core model or ERP solutions and IT infrastructure layers is described in the source.
• The source mentions both college-level audit or IT audit education and an engineering degree in computer sciences.
• CISA, CIA, or an equivalent professional certification is preferred.
• Fluent written and spoken English is required.

Core competencies

• ITAC and ITGC design, testing, and remediation.
• IT risk domains including GxP, privacy, security, and SOX.
• SOC report analysis and third-party risk assessment.
• Data analytics, automation tools, and continuous monitoring techniques.
• Critical thinking, structured problem solving, stakeholder management, and influencing.

Company and role benefits

• The role offers opportunities for career growth, global exposure, and work across multiple geographies.
• Sanofi describes health and wellbeing benefits, including healthcare, prevention programs, wellness programs, and parental leave.