Lead IT Internal Auditor

The Company

Dexcom Corporation (NASDAQ DXCM) is a pioneer and global leader in continuous glucose monitoring (CGM). Dexcom began as a small company with a big dream: To forever change how diabetes is managed. To unlock information and insights that drive better health outcomes. Here we are 25 years later, having pioneered an industry. And we're just getting started. We are broadening our vision beyond diabetes to empower people to take control of health. That means personalized, actionable insights aimed at solving important health challenges. To continue what we've started: Improving human health.

We are driven by thousands of ambitious, passionate people worldwide who are willing to fight like warriors to earn the trust of our customers by listening, serving with integrity, thinking big, and being dependable. We've already changed millions of lives and we're ready to change millions more. Our future ambition is to become a leading consumer health technology company while continuing to develop solutions for serious health conditions. We'll get there by constantly reinventing unique biosensing-technology experiences. Though we've come a long way from our small company days, our dreams are bigger than ever. The opportunity to improve health on a global scale stands before us.

Meet the team:

Are you passionate about understanding the “why” in managing risk and continuous professional development?

At Dexcom, our people are passionate about what we do, enjoy teamwork, and the ability to make a difference in this inclusive workplace.  We look to create an organization that empowers our customers to take control of their health and improve their lives.  We hope to see you join us on this journey. 

Are you a person with a penchant for working in a collaborative environment?  We are invested in providing you the opportunity to build a career, be creative, and try new things with the support you need to be successful. This highly visible role will support the Sr. Global IT Audit Manager and interact with all levels across the organization to promote and support a culture of continuous process improvement and efficiency driving toward standardized practices.

In this position, you will be responsible for executing audits for Sarbanes-Oxley (SOX), IT operational audits, and have an opportunity to work on data analytics and advanced audit techniques to assist the company to complete with statutory and regulatory requirements. The IT Lead Auditor will assist with project planning, execution, tracking and reporting adherence to regulatory compliance across the organization.

Where you come in:

• You assist and lead the implementation and management of the IT Audit program and other audit program strategies as needed. Liaise with both internal process control owners and external auditors as the main point of communication from IT and for Dexcom integrated financial statement audits.

• You work closely with internal audit teams on integrated risk assessments, scoping, and testing programs in accordance with COSO and COBIT frameworks. You assist to provide regular controls compliance metrics reporting and tracking.

• You understand and apply risk and control objective concepts to assess control design and develop a test approach for the key controls. You examine internal IT controls, evaluate, and conclude results in a timely manner on the design and operational effectiveness of controls with minimal review notes; determine exposure to risk, and provide value added recommendations.

• You ensure the completion of high-quality integrated test documentation, which demonstrates your understanding of IT processes, key reports reliance, identified risks, and design of controls (including Management Review Control requirements) and how to test the operation effectiveness.

• You document and report the remediation of control design deficiencies to policy and compliance guidelines and provide suggestions to management on ways to mitigate risk and/or enhance the effectiveness. Additionally, you will be responsible to validate the resolution and implementation of corrective action plans. Communicate complex technical issues in simplified terms to the relevant IT And non-IT Business System owners.

• You review work performed by other team members where applicable and provide guidance to ensure conclusions are properly supported and work product meets guidelines.

• You leverage data-driven approaches to analyze business processes, including business reliance on technologies, to assess controls/risks and design audit procedures. You work on complex transactions/issues where analysis of situation or data requires an in-depth evaluation, or you may provide guidance to staff auditors. Experience with data analytics audit a plus.

• You keep abreast of regulatory and IT compliance developments within or outside of the company as well as evolving best practices in compliance control.  Actively improve technical and project management skills through on-the-job feedback, performance evaluations, mentoring, including maintaining your CPE, and develop as a subject matter professional in audit domains or areas.

• You perform other duties, special projects, and/or various internal audits, over a board range of IT controls, to adequately meet the audit/project objectives, changing business conditions and/or requirements, identify opportunities for process improvements, and effectively.

What makes you successful:

• You are a seasoned professional with at least a Bachelor’s degree in Computer Information Systems, IT, or related. Programming knowledge a plus. You bring 6-10 years minimum relevant hands-on IT audit experience, including IT SOX compliance, IT application and operating system audit experience, including and at least 5 years from public accounting firm (Big4 a plus).  

• You have familiarity with a broad range of IT and Information Security products and technologies such as identity and access management, logging and monitoring and application security. You have hands-on knowledge and experience in testing some or all of the following Oracle EBS, Oracle Fusion, Oracle Warehouse Management System, Hyperion and FCCS, data warehouses, ETL processes, OIC and integration and logging tools.  Healthcare manufacturing experience a plus. 

• You demonstrate proven organizational, time-management, analytical, and communication skills and an ability to work both in teams and independently to effectively execute projects. You have a strong attention to detail and documentation. You are able to respond to company changing needs and balance the competing priorities, while maintaining project progress.

• You are in possession of or working towards a professional certification as a Certified Information Systems Auditor (CISA), CISM, CIA, and/or CISSP certification. Training in auditing security of cloud solutions a plus. You continue to develop new skills and stay abreast of applicable laws, the latest regulatory/SEC/audit requirements, and IT compliance developments within or outside of the company as well as evolving best practices in compliance control. 

• You have a strong and current understanding of SOX 404 IT auditing standards and practical hands-on experience evaluating risk and executing internal audit programs. You have a strong understanding and demonstrated experience in implementing compliance frameworks such as COSO, COBIT, ISO, PCAOB, NIST, and other IT auditing standards. Working knowledge of the NIST Cybersecurity Framework and cloud infrastructure risk management a plus.

• You have demonstrated experience in testing of SOX 404 IT General Controls (ITGC), IT Application and IT Configuration Controls of ERP systems and integrations, key reports, may have some experience with analysis and data analytics, and project leadership with a large manufacturing company.

• You have experience in auditing new system implementations (SDLC) for SOX control requirements a plus; and can provide guidance and recommendations for improvements to meet trending compliance requirements.

• You have some hands-on experience with data visualization and data manipulation using tools such as cphython, azure, SQL, Python, Tableau, Power BI.

• You have a flexible schedule to work with our global audit team and international Finance, Functional, and IT teams.  Willing and able to travel up to 25% of the time.

What you’ll get:

• A front row seat to life changing CGM technology. Learn about our brave #dexcomwarriors community.

• A full and comprehensive benefits program.

• Growth opportunities on a global scale.

• Access to career development through in-house learning programs and/or qualified tuition reimbursement.

• An exciting and innovative, industry-leading organization committed to our employees, customers, and the communities we serve.

Travel Required:

• 15-25%

Experience and Education Requirements:

• Typically requires a Bachelor’s degree in a technical discipline, and a minimum of 5-8 years related experience or Master’s degree and 2-5 years equivalent industry experience or a PhD and 0-2 years experience.

Please note: The information contained herein is not intended to be an all-inclusive list of the duties and responsibilities of the job, nor are they intended to be an all-inclusive list of the skills and abilities required to do the job. Management may, at its discretion, assign or reassign duties and responsibilities to this job at any time. The duties and responsibilities in this job description may be subject to change at any time due to reasonable accommodation or other reasons. Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions. 

An Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, or protected veteran status and will not be discriminated against on the basis of disability. Dexcom’s AAP may be viewed upon request by contacting Talent Acquisition at talentacquisition@dexcom.com. 

If you are an individual with a disability and would like to request a reasonable accommodation as part of the employment selection process, please contact Dexcom Talent Acquisition at talentacquisition@dexcom.com. 

View the OFCCP's Pay Transparency Non Discrimination Provision at this link. 

Meritain, an Aetna Company, creates and publishes the Machine-Readable Files on behalf of Dexcom. To link to the Machine-Readable Files, please click on the URL provided:  https://health1.meritain.com/app/public/#/one/insurerCode=MERITAIN_I&brandCode=MERITAINOVER/machine-readable-transparency-in-coverage?reportingEntityType=TPA_19874&lock=true

To all Staffing and Recruiting Agencies: Our Careers Site is only for individuals seeking a job at Dexcom. Only authorized staffing and recruiting agencies may use this site or to submit profiles, applications or resumes on specific requisitions. Dexcom does not accept unsolicited resumes or applications from agencies. Please do not forward resumes to the Talent Acquisition team, Dexcom employees or any other company location. Dexcom is not responsible for any fees related to unsolicited resumes/applications.
 

Salary: