IT Security, SOX Specialist

Distinguished Programs

IT Security & SOX Specialist overseeing IT General Controls program for compliance. Enhancing security posture and supporting audit readiness at Distinguished Programs.

Posted 6/25/2026full-timeRemote • 🇺🇸 United StatesMid-LevelSenior💰 $125,000 - $160,000 per yearWebsite

Tech Stack

Tools & technologies

CloudSDLC

About the role

Key responsibilities & impact

Lead and oversee the IT General Controls (ITGC) program to ensure SOX compliance across all systems, including control testing, deficiency evaluation, and remediation tracking.
Coordinate and execute on ITGC risk assessments, control documentation, walkthrough, and test activities across access management, change management, and IT operations.
Evaluate control design and operating effectiveness; identify deficiencies, assess risk impact, and partner with technology stakeholders on remediation planning.
Track remediation progress, validate corrective actions, and escalate unresolved risks in accordance with governance expectations.
Serve as the primary liaison with Internal Audit and external auditors, supporting SOX and other external audit requests and ensuring timely, audit-ready deliverables.
Prepare executive reports on control performance, deficiencies, and overall compliance status, while driving continuous improvement and control maturity.
Coordinate with IT stakeholders to obtain evidence, clarify control executions and support remediation activities.
Support the CISO in implementing internal security policies and providing required support to monitor, remediate, and improve the policies and procedures.
Manage security monitoring, incident response coordination, vulnerability management, and access governance activities.
Ensure appropriate security controls are integrated into system development lifecycle (SDLC), cloud deployments, and infrastructure operations.
Develop metrics, dashboards, and executive reporting related to security posture and compliance status.
Collaborate cross-functionally with Infrastructure, Application Development, and Shared Services teams.
Promote security awareness and compliance culture across the organization.

Requirements

What you’ll need

Bachelor’s degree in information security, Computer Science, Information Technology, or related field.
5+ years of experience in information security, IT audit, compliance, or risk management.
3+ years of experience managing SOX ITGC compliance programs.
Strong understanding of: SOX ITGC controls, Access management and identity governance, Change management processes, IT operations controls, Risk management frameworks.
Experience working with internal and external auditors.
Experience engineering security solutions in both on-prem and cloud based environments.
Strong project management, organizational and analytical skills.
Excellent communication and stakeholder management abilities.

Benefits

Comp & perks

Great healthcare coverage including Medical, Vision, and Dental.
401k with 4% company match. Immediately 100% vested.
Life, disability and supplemental insurance.
Growth and development opportunities.
Wellness Benefits including an Employee Assistance Program.
Work/Life Balance with generous time off policy including PTO and paid holidays.
Dependent Daycare flexible spending account.
Paid parental leave.
Commuter account.
A sabbatical every 7 years.
Summer Fridays (Leave at 2:00PM all Fridays from Memorial Day to Labor Day).

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

SOX complianceIT General Controls (ITGC)control testingdeficiency evaluationremediation trackingrisk assessmentscontrol documentationsecurity monitoringvulnerability managementsystem development lifecycle (SDLC)

Soft Skills

project managementorganizational skillsanalytical skillscommunicationstakeholder managementcontinuous improvementcollaborationsecurity awarenessproblem-solvingleadership

Certifications

Bachelor’s degree in information securityBachelor’s degree in Computer ScienceBachelor’s degree in Information Technology