Senior Engineer - Information Security & Risk
Core
Define, implement, and evaluate IT SOX controls to ensure compliance and manage IT risk.
Role type
Senior IC IT SOX Control Engineer
Builds
IT control frameworks and remediation plans for SOX compliance
Domain
Healthcare / IT Compliance & Audit
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
IT SOX control design, IT risk assessment, root cause analysis, IT governance, flowcharting, budget management
Preferred skills
HIPAA, GDPR, PCI compliance, SAP IT controls, GRC software (Archer, AuditBoard, ServiceNow), CISA/CPA/CISM/CISSP/CRISC certification
Technologies
SAP, Archer, AuditBoard, ServiceNow GRC
Responsibilities
Design and remediate IT controls for SOX compliance, perform IT risk assessments, support M&A due diligence, manage junior staff and contractors, track control issue remediation, support third-party certifications (SOC1/2), align with internal/external audits
Seniority
Senior, hands-on IC with management responsibilities
