IT SOX Compliance Manager (Hea Job/ 348)

Position Summary

The IT SOX Compliance Manager is responsible for overseeing the design, execution, and continuous improvement of the company’s Sarbanes-Oxley (SOX) compliance program related to ITGC’s. This role has one direct report, collaborates with process owners and application owners across the organization, and maintains a strong partnership with external auditors.

This role provides strategic insight into risk management, ensures adherence to regulatory requirements, and drives enhancements to strengthen the internal control environment, safeguard financial reporting integrity, and mitigate compliance risks.

Key Responsibilities

• Responsible for management of the IT SOX program ensuring timely completion of the planning, execution, and delivery of ITGC control design and operating effectiveness testing. Partner with application owners to foster a culture of continuous improvement and strong control ownership.

• Continuous evaluation of SOX in scope systems and implementation of required ITGC’s using a risk-based approach.  Collaborate with the Business Process SOX Manager to monitor and evaluate the impact of business changes (new systems, processes, acquisitions) on ICFR.  Identify areas for improvement and facilitate control rationalization and optimization efforts as needed.

• Evaluate ITGC control deficiencies or control gaps by performing a root cause analysis, determine financial reporting impact, and provide guidance during remediation efforts by recommending sustainable control solutions. 

• Partner with external auditors to evaluate results of operating effectiveness testing and coordinate and lead efforts to remediate deficiencies. Ensure adherence to external auditor minimum sampling guidelines to maximize reliance on the work of internal audit.

Required Qualifications

•    Bachelor’s degree in Computer Science, Management Information Systems, or a related field.
• 6+ years of experience in SOX compliance, internal audit, or external audit (with significant ICFR exposure).
• Experience leading and managing IT SOX efforts in a public company environment with strong knowledge of SOX, AICPA, COSO, COBIT, and SSAE attestation standards.
• Strong understanding of UNIX, Windows, Oracle and MS SQL Databases and ERP systems (such as SAP, Oracle, etc.) and proficient understanding of ITGC’s: access controls, change management controls, data integrity controls, and computer operations controls.
• Big 4 or large public accounting firm experience.
• Professional certification such as ACCA, CA, CPA, CIA, CISA, or equivalent. (Preferred)
• Experience with Auditboard (now Optro). (Preferred)