Sox Specialist
Core
Own the ICFR cycle for a defined portfolio of processes, from walkthroughs to audit-ready testing, challenging process owners to ensure management can sign SOx 302/404 conclusions with confidence.
Role type
SOX Specialist (Internal Controls)
Builds
Audit-ready workpapers, Risk and Control Matrices (RCM), and deficiency texts for financial statement impacts.
Domain
Financial Services / Internal Audit / SOX Compliance
Required skills
IFRS (IFRS 9, IFRS 18), GAAP, COSO 2013, PCAOB standards (AS 2201), financial statement analysis, materiality assessment, control design and testing, sampling methodologies, low-code automation, AI tools (Databricks, Cursor, Gemini), English (fluent written and spoken)
Preferred skills
Big 4 integrated audit experience, public-company Internal Audit with annual SOX cycle, 2LoD Internal Controls / SOX office, controllership experience, knowledge of ITGC and SOC reports
Technologies
Databricks, Cursor, Gemini, low-code automation platforms
Responsibilities
Define materiality and scope of accounts by reading financial statements, link risks in RCM to financial statement line items, apply internal methodology (Risk → Assertion → Objective → Control → Evidence), determine technologies in scope and request SOC reports, challenge process and control owners, execute TOE according to sampling and RoMM, draft deficiency texts tracking remediation, lead specific workstreams, use low-code automation and AI with a risk lens
Seniority
Mid-Senior (6 years experience)