SOX & Internal Controls Compliance IT Manager, CoStar Group - Arlington, VA

SOX & Internal Controls Compliance IT Manager Arlington, VA | Office based, Monday‑Friday Role Overview Support Sarbanes‑Oxley (SOX) compliance, internal controls, and enterprise risk management (ERM) assessments; assist with the implementation of SOX compliance programs; coordinate with IT and Information Security to align financial systems governance with enterprise cybersecurity standards. Responsibilities Conduct risk assessments and system scoping. Perform walkthroughs and document end‑to‑end technology processes, identifying risks and key controls through narrative documentation. Document and assess the design and effectiveness of key IT general controls (ITGC) and IT application controls (ITAC). Execute testing to validate operating effectiveness of controls. Evaluate control deficiencies to determine impact and significance. Identify and implement effective remediation plans for control deficiencies. Summarize and document results, including management reporting. Execute internal controls and IT risk management activities to support our risk management initiatives. Ensure robust IT General Controls over logical access management, role‑based security and segregation of duties, change management, system interfaces and data integrity, configuration controls. Oversee periodic user access reviews and segregation of duties analyses. Assess technology risks and control solutions for ERP, SaaS, IT infrastructure, and cloud platforms. Create and deliver presentations on technical concepts, project work plans, delivery approaches, milestones, and results to key stakeholders. Deliver efficient approaches to implement and assess risks relating to information security and change management. Implement data analytics to enhance internal control assessments. Work effectively across technology, accounting, finance, and operations groups. Basic Qualifications Bachelor’s degree in Information Systems, Accounting, Finance, or related field from an accredited, in‑person institution. Track record of commitment to prior employers. 7–8+ years of professional services experience with IT risk management and internal controls. One or more of the following risk‑related certifications preferred: CPA, CIA, CISA, or CISSP. Track record of technical expertise with SOX, IT risk management and internal controls assessments. Deep knowledge of SOX compliance and PCAOB requirements: SOX 404, COSO framework, ITGCs, segregation of duties architecture, ERP and financial systems governance. Experience implementing and assessing controls over highly automated business processes. Knowledge of emerging technology risks, including cloud computing, agile development, cybersecurity, and privacy. Knowledge of best practices for authentication, authorization, and change management. Ability to manage and prioritize assignments while meeting deadlines and maintaining attention to detail. Excellent analytical, problem‑solving, and critical thinking skills. Exceptional verbal and written communication skills to explain technical concepts to non‑technical stakeholders. Experience in a publicly traded company ($1B+ revenue) or Big 4 experience required. Preferred Qualifications 7–8+ years of experience in IT auditing, or IT compliance or IT risk management, preferably within a large organization or a public accounting firm. Knowledge of IT controls and governance frameworks such as SOC 1/2, COBIT, NIST (CSF, 800‑53, 800‑171), ITIL, ISO 27001/2. Experience with ERP applications such as Oracle Cloud. Proven experience in executing technology audits, evaluating IT general controls, application controls, and data integrity. Global, multi‑entity experience preferred. Benefits Comprehensive healthcare coverage: Medical, Vision, Dental, Prescription Drug. Life, legal, and supplementary insurance. Virtual and in‑person mental health counseling services. Commuter and parking benefits. 401(k) retirement plan with matching contributions. Employee stock purchase plan. Paid time off. Tuition reimbursement. On‑site fitness center and/or reimbursed fitness center membership costs (location dependent). Access to Diversity, Equity, & Inclusion Employee Resource Groups. Complimentary gourmet coffee, tea, hot chocolate, fresh fruit, and other healthy snacks. Sponsorship This position is open to qualified candidates who are currently eligible to work full‑time in the United States. CoStar Group is not able to provide visa sponsorship. Equal Employment Opportunity CoStar Group is an Equal Employment Opportunity Employer; we maintain a drug‑free workplace and perform pre‑employment substance abuse testing. #J-18808-Ljbffr Visual Lease