Security Risk & Compliance, SOX IT
Core
Senior contributor defining IT general controls (ITGC) requirements, monitoring, and evidence readiness to support SOX 404 compliance for a frontier AI company's technology stack.
Role type
Senior IC Security Risk & Compliance (SOX IT)
Builds
Continuous assurance programs, automated evidence collection, and control frameworks for ITGCs.
Domain
Financial services compliance (SOX) + AI/ML infrastructure
Required skills
ITGC design and testing, SOX 404 compliance, PCAOB AS 2201, COSO 2013, SDLC control assessment, automated evidence collection, risk assessment, cross-functional collaboration
Preferred skills
Big 4 audit experience, pre-IPO or public company experience, home-built financially significant systems control, AI/ML system controls, continuous controls monitoring
Technologies
Terraform, CI/CD pipelines, LLMs (Claude)
Responsibilities
Define control requirements and acceptance criteria for ITGC domains; pressure-test changes for SOX impact; perform second-line monitoring and readiness testing; build continuous monitoring and evidence readiness; run system and process risk assessments; drive control deficiency remediation; support external audit walkthroughs and testing; assess scope changes through a SOX lens; maintain alignment with SEC cybersecurity disclosure requirements.
Seniority
Senior, hands-on IC
