Lead and manage the execution of all phases of the IT SOX Compliance Program, including annual scoping and risk assessment, planning, control documentation, test of control design and operating effectiveness, issue tracking, deficiency remediation activities and reporting.
Coordinate with the IT SOX Liaison teams embedded within the lines of business (e.g., Information Security, IT, etc.) over IT SOX activities, including control walkthroughs, control testing, and any deficiency remediation activities.
Serve as a subject matter specialist on IT SOX controls (e.g., ITGCs, ITAC, key reports, etc.) and provide clear and consistent guidance to control owners on internal controls over financial reporting (ICFR) best practices.
Assess new processes and systems to determine its impact on the SOX program and support control owners with control design based on the risks identified.
Supervise and manage staff and outsourced providers, including setting expectations, providing feedback, and managing budgets, engagement status and progress.
Review SOX deliverables, ensuring high-quality documentation, consistency, timeliness, risk management and adherence to PCAOB auditing standards.
Assess IT control deficiencies and conclude on the effectiveness of IT ICFR at fiscal year-end.
Support the development and implementation of operational audit processes, frameworks, and methodologies to assess the effectiveness of operational processes, systems, and controls.
Lead risk assessments focusing on IT systems, enterprise applications, cybersecurity, data privacy and IT governance to identify key IT and operational risks, integrating these into the annual audit plan.
Identify potential audits for consideration into the internal audit plan.
Conduct and/or manage the execution of IT audit engagements by overseeing all phases of an audit, including planning, scoping, fieldwork, reporting, and action plan follow up on any audit findings.
Prepare reports, presentations, and dashboards for senior management and the Audit Committee on IT SOX compliance and audit status.
Participate in discussions with key stakeholders regarding leading practices, as well as standardization and optimization of processes and controls.
Act as an advisory partner to management to assess the changing risks and impact on controls due to any new system implementations and/or process changes.
Contribute to strengthening and improving the governance, risk, and control environment of the organization by proactively sharing issues, ideas, and recommendations with management.
Stay current on regulatory changes, emerging risks, IT audit best practices, and frameworks like COBIT, NIST, and ISO.
Promote a culture of continuous improvement, risk awareness and ownership, and control integrity across the organization.
Identify opportunities to automate and streamline control testing through the use of data analytics where possible.
This role will report to the Senior Director, Head of Internal Audit and SOX.
Requirements
Five to eight years of IT audit related experience, with three or more years in a managerial people supervisory role.
In-depth knowledge focused on IT SOX, ITGCs, ITACs, ICFR, COSO Framework, PCAOB Auditing Standards, IIA International Standards for the Professional Practice of Internal Auditing, risk and control standards and business processes.
Public accounting and SaaS experience are beneficial.
Minimum BA/BS degree in information systems, business administration, or a related field.
Relevant professional certifications preferred (e.g., Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Certified Information Security Manager (CISM), CPA, CFA, CIA and/or PMP).
Demonstrated relevant experience in all aspects of internal audit / SOX Compliance.
Experience in assessing configurations and controls of ERP systems (e.g., NetSuite).
Strong project management skills and the ability to produce timely deliverables and manage multiple and shifting priorities in a dynamic environment.
Strong understanding of financial, business and IT processes and the risks surrounding those processes.
Excellent communication, interpersonal, relationship building and presentation skills.
Proven ability to prioritize and multi-task.
Exceptional productivity skills; can be relied on to get the job done accurately and on time.
Ability to work with all levels of business partners and cross-functional groups.
Proven ability to collaborate with team members and generate solutions.
Ability to handle and protect sensitive information in a confidential and professional manner.
Must possess a flexible and open mind that can adapt to a dynamic and entrepreneurial environment that often requires developing new processes, procedures and policies.