Assist in the planning and execution of IT SOX compliance audits, including risk assessment, ITGC (IT General Controls) testing, and automated control testing.
Collaborate with IT, Security, and Finance teams to assess, document, and evaluate IT controls supporting financial reporting.
Review and evaluate IT processes and systems, ensuring alignment with SOX, COSO, and regulatory requirements.
Support the creation and maintenance of SOX-ready IT documentation, including narratives, process flow diagrams, RCMs, and control descriptions.
Perform testing of ITGCs (access controls, change management, operations monitoring) and application controls to assess design and operating effectiveness.
Identify and communicate control deficiencies, assist with remediation recommendations, and track corrective actions.
Prepare detailed work papers, audit evidence, and audit reports in accordance with professional standards.
Stay current on emerging IT risks, regulatory changes, and industry best practices relevant to SOX compliance.
Requirements
Bachelor’s degree in information technology, Information Systems, Computer Science, Accounting, or related field.
4+ years of IT audit or IT risk experience, preferably with Big 4 public accounting or internal audit experience focused on SOX compliance.
Strong understanding of ITGCs, application controls, Sarbanes-Oxley (SOX), COSO 2013 framework, and NIST/CIS security controls.
Familiarity with financial reporting processes and how IT supports them.
Strong written and verbal communication skills.
Analytical and problem-solving mindset with strong attention to detail.
Ability to manage multiple priorities and meet deadlines in a fast-paced environment.
Preferred: Professional certifications such as CISA, CIA, CPA, or CISSP.
Preferred: Experience with SOC 1 / SOC 2 audits and IT compliance assessments.
Preferred: Knowledge of Cloud Security, AWS, and SaaS applications.
Preferred: Experience auditing ERP and HR systems such as NetSuite, Workday, and related platforms.
Preferred: Previous corporate SOX experience, particularly in IT compliance and remediation efforts.