Manager, IT SOX
Core
Lead the IT SOX program and technology audits, ensuring compliance with SOX 404 and managing risk-based assessments across homegrown and third-party systems.
Role type
Manager, IT Internal Audit (SOX & Technology)
Builds
IT SOX control frameworks, risk-based technology audit plans, and AI-enabled audit workflows
Domain
Financial Services Compliance / IT Audit / SaaS
Required skills
IT SOX controls testing, ITGCs, IT application controls, CI/CD pipeline auditing, SQL, Python, project management, stakeholder influence, root cause analysis, audit planning and scoping
Preferred skills
CISA, CPA, CIA, CISSP, Optro (AuditBoard), NetSuite, AI governance frameworks (NIST AI RMF, ISO/IEC 42001), ISACA AAIA
Technologies
Optro, NetSuite, AWS, SQL, Python, Tableau
Responsibilities
Own the annual IT SOX plan including risk assessment and scoping; Lead end-to-end execution of IT SOX across ITGCs, application controls, and SOD; Manage and coach Sr. IT Internal Auditor; Lead risk-based technology audits (cloud security, data governance); Set standards for AI usage in the audit lifecycle; Evaluate IT deficiencies and drive remediation; Coordinate with external auditors and co-sourced providers; Provide SOX readiness advisory to business partners.
Seniority
Manager, hands-on leader with team management