At Lilly, the work is demanding because patients are waiting. We unite caring with discovery to help make life better for people around the world, knowing that every decision, every detail, and every day matters. Headquartered in Indianapolis, Indiana, our over 50,000 employees around the globe take on complex challenges to discover and deliver life-changing medicines, strengthen how health is understood and managed, and support the communities we serve. This is hard, urgent, selfless work—but it’s work worth doing. If you’re driven by purpose and ready to bring your best to work that truly matters for patients, we invite you to join us.
The IT Staff Auditor position is responsible for efficient and effective execution of audit engagements and projects. The auditor works with audit teams on domestic and global audits designed to test compliance with good internal control practices and corporate policies and procedures. Responsibilities include: identifying and assessing risks, measuring policy and procedure compliance, influencing action plans, partnering with affiliate management and process owners to complete and improve audit processes, and sharing of best methods and key learning across the organization.
While audits may include finance, ethical conduct (e.g. marketing and sales, medical), and Governance controls, the emphasis of this role is on IT and Information Security controls. The auditor may assist legal in conducting investigations and assessments when needed.
Audit Execution : Effectively partner with Lilly personnel for the purpose of identifying control risks relative to current regulations, policies, and procedures.
Process Ownership : Identify process improvements and work with key partners and team members to ensure that appropriate risks are addressed and that process changes are made in accordance with external guidelines and internal policies and procedures.
Communication : Understand critical or unmet needs by actively engaging in ongoing dialogue with auditees, affiliate management, audit team members, and business partners about risks and how Corporate Audit Services evaluates risk.
Support People : Provide continuous learning and contribute to an atmosphere of teamwork.
Basic Qualifications
Bachelor’s Degree
At least 2+ years experience in IT, IT audit, or technology risk management
Qualified applicants must be authorized to work in the United States on a full-time basis. Lilly will not provide support for or sponsor work authorization or visas for this role, including but not limited to F-1 CPT, F-1 OPT, F-1 STEM OPT, J-1, H-1B, TN, O-1, E-3, H-1B1, or L-1.
Additional Skills/Preferences
Graduate degree in Computer Science, Information Technology, or related technical discipline, including Software Engineering, Computer Engineering, Information Systems, Cybersecurity, Information Science, Network Engineering, Systems Engineering, Computer Information Systems (CIS), Management Information Systems (MIS), Cloud Computing, Data Science
Knowledge of software engineering and cybersecurity concepts
Understanding of IT General Controls and their implications.
Understanding of Privacy regulations
Experience with automation and data validation
Working knowledge of SAP
Knowledge of NIST and COBIT Framework
Willingness to work towards and obtain professional certification in IT/IS or audit area (CISA, CIA, CISSP, etc.)
Audit, quality, regulatory, or comparable experience
Strong learning agility
Strong time management and project management capabilities
Demonstrated critical thinking skills
Superb communication (oral and written), interpersonal and influencing skills
Ability to work both independently and within a team environment
Other Information:
This position is located at Lilly Corporate Center, Indianapolis
Domestic and international travel of up to 25% with international trips typically two weeks in duration (including weekend travel).
Lilly is dedicated to helping individuals with disabilities to actively…