SOX Analyst

We are a fast‑growing aerospace and defense company in the final stages of preparation for an initial public offering (IPO). As we are transitioning to a publicly traded company, we are building the internal controls infrastructure required to meet SEC and PCAOB standards. The Senior IT SOX Analyst will be a foundational hire — owning the IT controls program from the ground up, partnering directly with the CIO, and serving as the primary liaison with our external auditor. This is a high‑visibility, high‑impact role that spans both the pre‑IPO sprint and long‑term post‑IPO compliance operations. ESSENTIAL JOB FUNCTIONS: SOX IT Controls Program Design, implement, and own the IT General Controls (ITGC) framework across Epicor ERP, Visibility ERP, and JobBoss ERP. Identify, document, and test IT Application Controls (ITACs) and automated business process controls. Maintain a risk‑based controls inventory and ensure control evidence is audit‑ready on a continuous basis. Lead SOX scoping, risk assessments, and walkthroughs across all in‑scope systems. IPO Readiness & Ongoing Compliance Drive IT SOX readiness activities to support the company’s IPO timeline. Establish repeatable, scalable processes for quarterly and annual SOX compliance post‑IPO. Develop and maintain control narratives, flowcharts, and process documentation. Track and remediate control deficiencies, including root cause analysis and management action plans. External Auditor Coordination Serve as the primary IT audit liaison with EY, coordinating PBC (Provided by Client) requests, walkthroughs, and testing timelines. Proactively manage auditor relationships to minimize disruption to business operations. Support financial statement audit activities as they intersect with IT controls. Align IT controls with CMMC and NIST 800‑171 requirements. Support the protection of Controlled Unclassified Information (CUI) within in‑scope IT systems. Collaborate with IT security and compliance teams to ensure SOX and defense compliance frameworks are cohesive, not duplicative. Cross‑Functional Partnership Work closely with Finance, Accounting, IT, and Operations to embed controls into business processes. Advise system owners and process owners on control design best practices. Support internal audit initiatives and special projects as directed by the CIO. 4–6+ years of experience in IT audit, IT SOX compliance, or IT risk management. Hands‑on experience executing ITGC and ITAC testing (access management, change management, computer operations, SDLC). Working knowledge of ERP environments and associated IT control risks. Familiarity with CMMC and NIST 800‑171 frameworks. Experience working directly with external auditors (Big 4 preferred). Strong documentation skills — control narratives, flowcharts, risk and control matrices (RCMs). Ability to work independently, manage competing priorities, and thrive in a fast‑paced, high‑stakes environment. Experience supporting a company through an IPO or first‑year SOX implementation. Exposure to Epicor ERP, Visibility ERP, or JobBoss ERP. Familiarity with PCAOB AS2201 standards. Professional certifications such as CISA, CIA, CISSP, or CPA are a plus but not required. ADDITIONAL INFORMATION: This job description is intended to describe the general nature and level of work being performed. It is not an exhaustive list of all responsibilities, duties, or skills required. Employees may be required to perform other job‑related duties as assigned, consistent with business needs and applicable law. Due to the nature of our work and applicable U.S. export control laws, this position requires International Traffic in Arms Regulations (ITAR) eligibility. Only individuals who qualify as a “U.S. person” as defined by ITAR (U.S. citizens, U.S. permanent residents, refugees, or asylees), unless specified otherwise within the job description, are eligible for employment. Applied Aerospace & Defense (“AA&D”) is committed to equal employment opportunity. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, age, disability, veteran or military status, or any other characteristic protected by applicable federal, state, or local law. Applicants who require reasonable accommodation for any part of the application or hiring process due to disability, medical condition, or other protected reason may contact the Human Resources Department. Requests will be reviewed in accordance with applicable law. Where required by law, the applicable pay range and a summary of benefits and other compensation for this position will be provided. #J-18808-Ljbffr Applied Aerospace & Defense