Description

You will own the assurance and maintenance of the IT SOX program and the technology internal control environment.

This role is hybrid.

Responsibilities

• Document SOX control design narratives and conduct operating effectiveness testing for in-scope systems.
• Identify, evaluate, and monitor remediation of control deficiencies across the organization.
• Assist with quarterly SOX control certifications and management attestations.
• Automate and gather audit evidence for internal and external SOX audits.

Required Skills

• 5+ years in Security GRC, IT Audit, or related field with strong focus on SOX compliance and IT General Controls (ITGCs).
• Big 4 IT Audit experience or equivalent, with expertise in evaluating ITGCs and application controls supporting financial reporting.
• Deep understanding of SOX Section 404 requirements, including risk assessment, control design, and effectiveness testing.
• Strong knowledge of ITGC domains: access controls, change management, IT operations, and System Development Lifecycle (SDLC).
• Experience with cloud platforms (AWS, Azure), SaaS applications, and their SOX control implications.
• Proficiency in GRC tools like ServiceNow to streamline audit workflows.
• Experience managing evidence collection and issue resolution with internal and external auditors.
• CISA, CPA, or CIA professional certifications are required.

Key Skills

Education

Any Gradute