Security Risk & Compliance, SOX IT

Skills

About the Role

You will act as a hands-on senior contributor defining what IT general controls must achieve for SOX 404. You'll set control requirements, test controls ahead of Internal Audit and external auditors, work with GRC engineering to automate evidence, and drive remediation with engineering partners.

Requirements

• Senior contributor experience in an ITGC program through SOX 404 readiness or at a public company
• Working command of PCAOB AS 2201 and COSO 2013
• Hands-on IT audit or IT SOX experience across access management, change management and operations
• Engineering fluency: read code and Terraform, follow CI/CD pipelines
• Familiarity with developer platforms, release engineering, cloud infrastructure or ERP/financial systems
• Strong collaboration and communication skills
• Daily use of Claude and other LLMs
• Bachelor's degree or equivalent combination of education, training and/or experience

Responsibilities

• Define control requirements and acceptance criteria across ITGC domains for SOX in-scope systems
• Set control bar for new and changed systems before go-live
• Review infrastructure, system and agent framework changes for SOX impact
• Perform second-line monitoring and readiness testing of ITGCs and ITACs
• Build continuous monitoring and automated evidence collection with GRC engineering
• Run system and process risk assessments
• Drive control deficiency remediation with cross-functional partners
• Support external audit with Finance and Internal Audit
• Assess scope changes through a SOX lens
• Support controls behind SEC cybersecurity disclosure requirements

Benefits

• Optional equity donation matching
• Generous vacation and parental leave
• Flexible working hours
• Visa sponsorship