Internal Control Global Testing COE Team Lead IT Controls

Main responsibilities:

• As a key pillar of Sanofi's 2nd Line of Defense, the IC&P CoE supports and challenges operational standards, guides business teams, and reports directly to ExCom on control implementation and action plans. Reporting to the Head of Internal Controls Testing COE, the Internal Control Global Testing COE Team Lead - IT Controls (ITAC/ITGC) is both a strategic leader and technical authority ?? managing two dedicated teams (one for ITAC, one for ITGC). This role is responsible for orchestrating end-to-end testing activities across both domains, driving harmonization, and ensuring strong alignment across all scopes and stakeholders. As the ITAC/ITGC Lead, you will directly shape Sanofi's audit readiness, digital control maturity, and the adoption of next-generation testing technologies - while building and inspiring a team of IT controls professionals.
• For ITAC scope, this includes IT Dependent controls (automated controls, key reports, interfaces), User Access Management (UAM) and Segregation of Duties (SOD) in coordination with external auditors, SOX entities, and BSC System Controls Leads. For ITGC scope, this includes Digital SOX ITGC and High Risk / IC testing activities in coordination with external auditors, Digital control owners, and Digital Risk & Compliance Leads.

• Define and execute the annual ITAC & ITGC testing roadmap, and resource plan in coordination with BSC System Controls Leads, Digital Risk & Compliance Leads, external auditors, SOX entities, including SOC report analysis for in-scope third parties, and alignment with IC&P CoE priorities. Own testing quality and rigor across all ITAC & ITGC testing activities ?? ensuring consistency, accuracy, and completeness of testing documentation and findings. Serve as senior SPOC bridging IC&P CoE and SOX Leads for all ITAC & ITGC testing activities
• Drive harmonization and centralization of IT Application Controls (ITAC) based on IT Core Model solutions. Strengthen reliance on automated controls, key reports, UAM, and SOD controls in coordination with Digital IC and BSC System Controls teams. Pioneer automation initiatives within SOX, CSRD, and IC testing processes -leveraging data analytics and emerging technologies to reduce manual effort, increase testing coverage, and enable continuous improvement. Lead and develop a team to execute the testing mission with excellence. Report and communicate testing outcomes, risks, and performance metrics to senior leadership and key stakeholders
• MANAGE CONTROL ENVIRONMENT - Oversee yearly Global ITDs Inventory with other CoE??s inputs. Lead SOX Team scoping support activities. Manage supporting documents and tools related to ITDs controls, UAM/SOD, and ITGC. ALIGN STAKEHOLDER GROUPS - Act as the senior SPOC on all daily ITAC/ITGC interactions. Ensure testing results reconciliation with external auditors to ensure consistency and accuracy. Monitor Progress, report findings, and escalate issues proactively to appropriate leadership teams.
• MANAGE CONTROL ACTIVITIES (CSA, IC Testing, SOX testing): Oversee process walkthroughs and interviews during the Design phase to map control flows and identify ITDs. Oversee and ensure quality of ITGC and ITAC testing execution and documentation with rigor and precision. Direct SOC reports analysis using Sanofi's review methodology and ensure proper and complete testing coverage. Ensure all CUECs are reported and analysed. Identify all applicable CSOCs. Oversee Internal Control Self-Assessment (CSA) campaign execution and ensure quality of High-Risk testing execution on non-SOX IT systems. Oversee and ensure quality of CSRD testing execution and documentation with rigor and precision.
• PARTNER WITH BUSINESS : Identify and monitor risks related to ITGC and ITAC. Lead, mentor and develop CoE ITAC/ITGC team members. Build awareness on ITGC, ITDs/IT Application Controls, SOD and positive culture towards all stakeholders from 1st to 3rd line of defense. Manage team performance, resource allocation, and capacity planning.
• DRIVE CONTINUOUS IMPROVEMENT: Champion the harmonization and centralization of ITAC testing practices. Pioneer automation opportunities within SOX, CSRD, and IC testing processes, leveraging data analytics and emerging technologies to reduce manual effort and expand testing coverage. Drive continuous evolution of testing methodology in line with regulatory changes, new requirements, and emerging technologies. Ensure local and regional regulatory requirements are reported to central management to ensure global alignment.

About you

• Experience: 7+ years in IT Audit within a Big 4 firm or multinational organization, with hands-on experience in SOX IT Application Controls and IT General Controls.
• Expert knowledge of SOX (Sarbanes-Oxley) compliance requirements and testing methodologies. Expert knowledge of ITGC, ITAC, and IT Dependent Controls (ITDs), including automated controls, key reports, interfaces, UAM, and SOD. Knowledge/Awareness, or experience in Accounting / Financial reporting. Understanding of CSRD (Corporate Sustainability Reporting Directive) frameworks and reporting processes. Experience with IT Core Model solutions and ERP systems (SAP, Oracle, Workday, etc.) Experience with IT infrastructure layers (operating systems, databases) Experience in implementing automation solutions. Professional certification (CISA, CIA or equivalent) preferred
• Education: Graduated College level in Audit, IT Audit or similar, Engineering degree in Computer Sciences.
• Core competencies: ITAC/ITGC testing design, execution, documentation, quality assurance and strategic oversight. SOX testing methodology scoping, walkthroughs, design testing, evidence review, impact assessment of deficiencies and identification of mitigating procedures. Data analytics, automation tools, and continuous testing techniques. Financial systems and IT risk domains (GxP, Privacy, Security, SOX). KPI development, testing performance tracking, and management reporting. Team leadership and talent development.
• Interpersonal: Testing leadership and quality ownership ?? ability to set and uphold high testing standards across a team. Strategic thinking and testing roadmap planning ?? ability to translate regulatory requirements into actionable testing strategies. Executive communication and presentation skills ?? confident in communicating testing results and risks to senior leadership and external stakeholders. Mentoring and developing testing experts ?? committed to growing the next generation of IT controls testing professionals. Confident stakeholder management and influencing skills across all levels. Excellent written and verbal communication in English. Proven project management and cross-functional team coordination. Adaptability and resilience in a fast-paced, evolving environment. Passion for building continuous testing improvement culture
• Change management: Ability to drive adoption of new testing processes, tools, and automation. Confident stakeholder management and influencing skills across all levels. Proven project management and cross-functional team coordination. Adaptability and resilience in a fast-paced, evolving environment. Passion for continuous testing improvement culture.
• Languages: Excellent written and verbal communication in English.