Senior Analyst for IT Application and General Controls

Overview

Senior Analyst – IT Application & General Controls (ITAC/ITGC) in Sanofi's Internal Control & Processes Testing Center of Excellence (IC&P CoE), supporting SOX and non-SOX control testing across IT applications and general controls.

What you'll do

• Support Internal Control Global Process Leads in creating and updating test scripts for SOX and non-SOX testing, providing constructive feedback and sharing best practices.
• Coordinate the CSA campaign by consolidating the Local Process Owners list, updating tools, and following CSA completion and sign-off.
• Set up and conduct SOX and CSRD ITAC and ITGC testing in coordination with external auditors, SOX entities, and BSC System Controls Leads.
• Execute ITAC testing covering IT dependent controls (automated controls, key reports, interfaces), User Access Management (UAM) and Segregation of Duties (SOD).
• Execute ITGC testing covering Digital SOX ITGC and High-Risk testing in coordination with external auditors, Digital control owners and Digital Risk & Compliance Leads.
• Analyze SOC reports for in-scope third parties based on Sanofi's review methodology, report CUECs and CSOCs and ensure proper testing.
• Conduct testing of High Risk controls for Digital solutions in compliance with the Digital Control Framework, including High Risk control testing on non-SOX IT systems.
• Understand in-scope applications, infrastructure and third-party specificities; review prior-year test results and Sanofi methodology; obtain access to Sanofi systems including the GRC system.
• Contribute to process walkthroughs and interviews during the Design phase to map control flows and identify ITDs; submit evidence requests to control owners and report delays or issues affecting testing orchestration.
• Identify optimization, automation and continuous improvement opportunities within SOX, CSRD and IC testing processes.

What you'll need

• Minimum 2+ years of experience auditing companies in SOX IT Application Controls and IT General Controls.
• More than 2 years in IT Audit at an auditing firm or private company in SOX ITAC and ITGC audit.
• College-level graduate in Audit, IT Audit or similar.
• Engineering degree in Computer Sciences.
• Demonstrated knowledge of SOX compliance requirements and testing methodologies.
• Expert knowledge of ITGC, ITAC and IT Dependent controls (ITDs).
• Expertise in automated controls, key reports, interfaces, UAM and SOD.
• Experience with SOC report analysis and PCAOB requirements.
• Knowledge/awareness or experience in Accounting / Financial reporting.
• Understanding of CSRD frameworks and reporting processes.
• Experience with IT Core Model solutions and ERP systems (SAP, Oracle, Workday, etc.).
• Experience with IT infrastructure layers (operating systems, databases).
• Strong critical thinking and structured problem-solving skills.
• Confident stakeholder management and influencing skills across all levels.
• Excellent written and verbal communication in English; must be fluent in English (written and spoken).
• Adaptability and resilience in a fast-paced, evolving environment.

Nice to have

• Professional certification (CISA, CIA or equivalent).
• Background with Big 4 audit methodology.

Details

• Location: Hyderabad.
• Reports to the IC&P CoE ITAC/ITGC Lead.