Salary
💰 $158,200 - $237,400 per year
About the role
- Serve as the main contact between cybersecurity teams and auditors for SOX and cyber risk matters.
- Help with IT SOX control testing, identifying gaps, and supporting remediation activities for the Identity & Access Management (IAM) team.
- Assist in SOX compliance tasks such as control testing, lookback procedures, documenting processes, and validating remediation.
- Support automation efforts for the SOX compliance process by helping document requirements for new compliance tools.
- Assess applications, databases, operating systems, and business processes to ensure they meet compliance standards.
- Re-test controls that have been updated or fixed due to previous issues.
- Review and interpret evidence to confirm controls work effectively.
- Plan, conduct, and report on IT compliance assessments using industry standards and regulations (e.g., SOX, PCI, ISO27001, NIST).
- Develop and improve test procedures for control validation.
- Review IT policies and procedures to identify ways to reduce business risk.
- Analyze test results for vulnerabilities or gaps and work with teams to resolve them.
- Identify risks from control failures and help find solutions or alternative controls.
- Monitor regulatory changes and help update compliance strategies.
- Work with management to improve data security controls.
- Ensure control documentation is kept up-to-date.
- Track and report metrics on compliance activities.
- Act as the compliance point of contact for your areas of responsibility.
- Coordinate with subject matter experts to prepare audit responses.
- Collaborate with business partners to streamline and align compliance efforts.
- Take on other tasks as needed to support compliance commitments.
Requirements
- 5 years of general IT experience, including IT security or IT risk management experience.
- Telecom Industry experience preferred.
- Certification: CISA or CISSP or CRISC
- Preferred:
- Bachelor's degree in computer science or related field, or equivalent work experience.
- Medical/Dental/Vision coverage
- 401(k) plan
- Tuition reimbursement program
- Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)
- Paid Parental Leave
- Paid Caregiver Leave
- Additional sick leave beyond what state and local law require may be available but is unprotected
- Adoption Reimbursement
- Disability Benefits (short term and long term)
- Life and Accidental Death Insurance
- Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
- Employee Assistance Programs (EAP)
- Extensive employee wellness programs
- Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phone.
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
SOX complianceIT control testingIdentity & Access Managementcontrol validationrisk assessmenttest procedures developmentevidence reviewvulnerability analysisregulatory monitoringdata security controls
Soft skills
communicationcollaborationproblem-solvingorganizational skillsattention to detailanalytical skillsproject managementstakeholder engagementadaptabilityleadership
Certifications
CISACISSPCRISC