IT SOX Manager

IT SOX Manager

The IT SOX Manager is a critical global role responsible for ensuring the effective design, implementation, and operation of IT controls in compliance with SOX requirements. This position works closely with control owners, supporting teams, and external auditors to manage the SOX IT control framework, assist in remediation efforts, and support the growth of IT controls for non-SOX applications. This role reports to the Sr. Manager of Global IT Governance and Risk within the CISO organization.

Key responsibilities include managing SOX IT controls, enhancing control design, overseeing remediation efforts, expanding IT controls beyond SOX, providing training and support, managing the company's GRC tool for effective control tracking and assessments, and preparing for stricter compliance.

Education and Certification

• Bachelor's degree in information technology, Computer Science, Business Administration, or a related field.
• Professional certifications such as CISA, CRISC, or CISSP are preferred.

Experience

• 5+ years of experience in IT SOX compliance, IT audit, or IT risk management in a global organization.
• Proven experience with IT general controls (ITGCs), SOX 404, and related frameworks (e.g., COBIT, COSO).
• Familiarity with ERP systems, cloud platforms, and GRC tools is highly desirable.

Skills and Competencies

• Strong analytical and problem-solving skills with the ability to identify risks and recommend solutions.
• Excellent communication and interpersonal skills to collaborate with diverse teams and stakeholders globally.
• Strong knowledge of IT control design, operation, and testing methodologies.
• Detail-oriented with strong organizational skills to manage multiple priorities effectively.
• Ability to work both independently and collaboratively as part of a global team.

Additional Information

• Limited travel required (less than 10%).
• This position will have direct reports but is also expected to work as an individual contributor as needed.
• This position requires a proactive approach to driving global IT compliance and control improvements.