Open Positions

How you will Achieve More with Intellia:

The Manager of IT Audit, Risk, and Compliance role supports the external third-party and internal audit programs and risk assessment processes.  He / She will be responsible for the audit, risk, and compliance program including building and ensuring compliance with Intellia’s security controls, information policies, and standards. This role will oversee the SOX compliance IT audit and take steps to implement an enhanced controls framework, e.g., ISO 27001, to improve the management and maintenance of Intellia's internal controls.

Responsible for continuous monitoring of the work intake, managing escalations, and delivering the overall information risk, and mitigation options to the information governance and business stakeholders. Provides recommendations to reduce risks, and improve collaboration across business and IT.

This Manager role partners and works closely with other Intellia information stakeholder leaders (HR, Finance, Legal, Regulatory, Quality, and IT functions) to promote, enhance, and communicate the value proposition of the GRC Program.

In this opportunity, your main responsibilities will include:

• Works closely with GRC Director towards overall program rollout and providing risk-based operational metrics/management support. 

• Develops & maintains IT general controls to provide information assurance and support our internal and external audit requirements.

• Collaborate with internal and external auditors, and business stakeholders to ensure the effectiveness of the IT operating controls

• Develops & maintains applicable Information risk management policies, standards, and operating procedures (SOP) to enforce the quality and consistency of the services this team provides. 

• Design and report the overall information risk posture from an internal security risk management based on metrics to information governance leaders to enable risk oversight and governance.

• Oversees risk analysis required to assess the security risk of Intellia security controls and infrastructure whether hosted internally or externally.

• Perform internal IT Risk Assessments against the controls to identify, assess, and remediate threats internally.

• Enhance and maintain a risk register to track the open risks. Communicates security risk effectively to all stakeholders including IT and business senior leadership. Monitors Intellia business owner compliance with agreed-upon risk mitigation strategies and approaches to reduce risks.

About You:

If you enjoy working in Biotech and are a strategic IT partner with strong information security, risk, and IT audit/controls experience, then this could be just the job for you!

Required Qualifications:

• Bachelor’s degree in Technology, Science, Engineering, or a related field 

• Minimum of 4-6 years of technical experience; Minimum of 3 years’ experience in information security, auditing & assessing technology risks with a strong focus on information security domains

• Information Security professionals with industry certification (CRISC, CISA, CISSP) is strongly preferred, or applicants willing to obtain certification in 6 months upon hiring.

• Experience performing information security risk assessments and risk analysis preferably in the healthcare/life sciences industry.

• Hands-on management professional who can help build teams with demonstrated leadership skills in areas of people management, conflict resolution, team building, presentation skills, and metrics-based management.

Meet your Future Team:

This role will report directly to the Senior Director, Governance Risk & Compliance. The broader technology team is made up of twelve other individuals, who bring a range of experience and knowledge. While a small team, you will join a group of passionate individuals who enjoy working with one another. Within the technology team, you will work with the Enterprise Applications group which supports our G&A applications including our in-scope SOX systems and HCM platform; our R&D Systems group which supports systems for Quality, Clinical, Regulatory, TechOps, and Research; and the Infrastructure and Operations team which has a heavy network security focus.

While the technology team is currently working virtually, we are tentatively planning a return to the office sometime this year. Although in a virtual environment, the group has made it a priority to continue to foster a sense of community. This includes virtual happy hours, team all-hands meetings, game nights, and more! You can expect to join a hardworking, collaborative environment.

Covid-19 Vaccination Policy: All Intellia employees, regardless of work location, must be fully vaccinated for COVID-19. This requirement includes a booster dose once eligible. Requests for exemption for medical or sincerely held religious beliefs will be considered.

EEOC Statement: Intellia believes in a diverse environment, and is committed to equal employment opportunity for all its employees and qualified applicants. We do not discriminate in recruitment, hiring, training, promotion or any other employment practices for reasons of race, color, religion, gender, national origin, age, sexual orientation, marital or veteran status, disability, or any other legally protected status. Intellia will make reasonable accommodations for qualified individuals with known disabilities, in accordance with applicable law.