Senior SOX Manager – IT

Overview

We are looking for a highly skilled and detail-oriented Senior SOX Manager – IT, to lead and manage the execution of our IT General Controls (ITGC) and IT Automated Controls (ITAC) compliance activities as part of the company's SOX program. In this role, you will ensure the company's IT control environment supports an efficient and effective internal control framework to comply with Section 404 of the Sarbanes-Oxley Act (SOX).

This is a leadership role ideal for an experienced IT compliance professional who thrives in a fast-paced, highly collaborative engineering environment. This is not a traditional audit role. It requires genuine curiosity about how engineering teams build and operate, and the ability to translate between two very different worlds. You are equally comfortable in a compliance conversation and an engineering standup — someone who can earn the trust of both auditors and engineers, challenge outdated control assumptions, and drive toward a more efficient and sustainable SOX program.

About the Team: You will be part of the broader SOX Compliance and Controls team and work alongside professionals from accounting, finance, and IT, as well as external auditors. This collaborative and innovative team is focused on building a resilient compliance program to address operational, financial, and system-level risks while maintaining high standards for internal controls and governance.

About the Job

As the Senior SOX Manager – IT, you will own all IT related controls processes, including defining and optimizing IT controls over financial reporting (ICFR). You will take charge of maintaining compliance while proactively identifying risks and partnering with IT stakeholders to strengthen the control environment. Your contributions will directly impact the reliability of financial data and the compliance posture of the company.

A defining feature of this role is close day-to-day partnership with Engineering- an aligned associate embedded within Engineering teams. You will work alongside this embedded team — leveraging their systems knowledge and Engineering relationships to design controls that are rigorous, right-sized, and operationally sustainable. You bring the compliance expertise; they bring the Engineering context. Together you bridge the gap between audit requirements and engineering reality.

Key Responsibilities include:

• IT Controls Ownership:
• Lead the IT controls component of the SOX program, including managing the identification and evaluation of IT processes and risks.
• Design and assess IT controls to support ICFR, such as access management, change management, and IT operations controls.
• SOX Compliance:
• Ensure IT controls comply with SOX requirements while staying aligned with COSO and PCAOB standards.
• Work with IT and finance stakeholders to resolve control deficiencies and drive remediation efforts in a timely and efficient manner.
• Collaboration with IT and Audit Partners:
• Partner with IT teams to implement, document, and maintain effective IT controls.
• Collaborate with internal and external auditors to coordinate audit schedules, provide evidence, and address IT audit findings.
• Risk Management and Process Improvement:
• Perform periodic risk assessments related to IT processes and evaluate the impacts of system implementations or changes on the control environment.
• Identify opportunities to automate IT controls and improve process efficiency.
• Testing and Reporting:
• Oversee testing efforts for IT controls and collaborate on reporting outcomes to SOX leadership, executive management, and the Audit Committee.
• Provide recommendations to address identified issues and ensure robust controls are in place.
• Influence and Partnership:
• Operate as a subject matter expert and trusted compliance partner to Engineering-aligned associates, providing SOX guidance and coaching without direct management authority.
• Influence without authority — driving alignment, building trust, and moving the program forward across teams that do not report to you.
• Bring structure and rigor to a complex, cross-functional program — maintaining clear plans, owners, and timelines across Engineering, Finance, and external audit partners.

About You

Minimum Qualifications

• Bachelor's degree in Information Technology, Accounting, or a related field; relevant certifications such as CISA, CISSP, or CPA preferred.
• 10+ years of experience in IT audit, SOX compliance, or risk management with a focus on IT controls, preferably in a publicly traded company or Big Four public accounting firm.
• Demonstrated expertise in identifying, designing, and testing IT controls to support compliance standards.
• Deep knowledge of SOX 404, COSO framework, COBIT principles, IT security, and risk management practices.
• Hands-on experience with IT controls domains including access management, change management, and disaster recovery.
• Proven ability to earn the trust of engineering teams and communicate technical risks and control concepts in plain language — to engineers, senior executives, and audit committees alike.
• Experience working in or alongside high-velocity engineering organizations at a technology company.

Preferred Qualifications

• Advanced degree (MBA, MIS, or equivalent) is a plus.
• Experience managing IT SOX efforts for ERP systems such as Oracle, SAP, or Workday.
• Familiarity with cloud-based environments (AWS, Azure, GCP) and related control implications.
• Prior experience in an embedded or liaison role between compliance and engineering functions.
• Strong project management and organizational skills with a results-oriented approach.