Internal Audit & SOX Manager

Crinetics is a pharmaceutical company based in San Diego, California, developing much-needed therapies for people with endocrine diseases and endocrine-related tumors. We were founded by a dedicated team of scientists with the simple belief that better therapies developed from rigorous innovation can lead to better lives. Our work continues to make a real difference in the lives of patients. We have a prolific discovery engine and a robust preclinical and clinical development pipeline. We are driven by science with a patient-centric and team-oriented culture. Crinetics is known for its inclusive workplace culture. We are also a dog-friendly workplace. This is an exciting time to join Crinetics as we shape our organization into the world’s premier fully-integrated endocrine company from discovery to patients. Join our team as we transform the lives of others.

Position Summary:

The Internal Audit SOX Manager will report to the Director, Internal Audit SOX, and play a crucial role in the design, implementation, and ongoing management of the company's internal control over financial reporting (ICFR) environment. With Crinetics' ongoing commercialization efforts and the increasing reliance on technology to support our rapid growth, there is a strong and growing emphasis on Information Technology General Controls (ITGCs). This individual will be instrumental in supporting the company's growth and ensuring a robust and scalable control framework that addresses the evolving technology landscape. This role requires experience in internal controls, compliance, risk management, and particularly IT general controls, including experience at a Big 4 accounting firm. This person will work cross-functionally to increase awareness around risk mitigation strategies and controls, especially as they relate to IT systems and processes. This role will also support other audit efforts such as SOX business process controls as well as other audit engagements.

Essential Job Functions and Responsibilities:

These may include but are not limited to:

• Partner with IT, Finance, Legal, and other key stakeholders to ensure a strong control environment is embedded in new systems, processes, and business initiatives, including international operations, with a particular focus on IT systems and applications.
• Assist in the annual SOX risk assessment and scoping process, with an emphasis on identifying and assessing IT-related risks and controls, ensuring alignment with evolving business risks and regulatory changes.
• Lead the development and continuous improvement of ITGC documentation, controls, and testing methodologies to support operational efficiency and compliance readiness.
• Execute ITGC testing, including testing of key reports and interfaces, and provide clear, concise documentation of results.
• Identify and evaluate deficiencies related to IT controls, provide recommendations for remediation, and track the progress of remediation efforts.
• Stay current on industry best practices, emerging IT risks (e.g., cybersecurity, data privacy), and regulatory developments to proactively adapt and evolve the compliance program.
• Foster a culture of accountability and controls awareness, particularly regarding IT risks, through training, communication, and engagement across all levels of the organization.
• Work closely with external service providers on ITGC audits, ensuring work is performed efficiently and timely.
• Contribute to ad-hoc reviews, process improvement projects, or other special projects as needed.
• Support the identification and implementation of opportunities to enhance audit effectiveness through technology, including the use of AI, automation, and data analytics to improve IT control testing precision, risk detection, and overall audit scalability.

Education and Experience:

Required:

• Bachelor's or Master's degree in a related field (e.g., Information Systems) or equivalent.
• At least 8 years of internal audit, risk management, and IT audit experience, including Big 4 experience, alternatively 6 years of experience with a Master’s will be considered.
• Active CPA, CIA, CISA, or equivalent certification.
• In-depth knowledge of Sarbanes-Oxley (SOX) requirements, internal control frameworks (e.g., COSO, COBIT), and PCAOB standards, with a strong understanding of their application to IT environments.
• Advanced understanding of generally accepted accounting principles (GAAP).
• Experience with ITGC audits, key reports testing, and flowcharting.
• Experience managing or overseeing IT-related SOX programs at a public company.
• Strong communication, presentation, and interpersonal skills to effectively interact with various stakeholders, including IT leadership, finance teams, and external auditors.