Lead, SOX Program Strategy & Audit Excellence - ITGC/ITAC

Lead, Sox Program Strategy & Audit Excellence

We're looking for a Lead, SOX Program Strategy & Audit Excellence who thrives at the intersection of risk management, audit execution, and technology. This is a high-impact individual contributor role reporting to the Senior Manager, SOX Strategy, Operations & Audit Excellence.

This role carries two significant and highly visible areas of ownership: (1) serving as the primary SOX liaison to Intuit's Technology organization, driving coverage, quality, and strategic improvement across IT General Controls (ITGCs) and automated/application controls; and (2) owning and operationalizing Intuit's AI SOX Governance Framework including risk classification, lifecycle governance, and control standards for AI and ML systems in scope for SOX.

As a Lead, you will be a trusted partner to cross-functional stakeholders across Finance, Accounting and Tech bringing deep expertise in IT risk, automated controls, and AI governance to help the company build a scalable, well-designed, and future-ready control environment.

Key Responsibilities

• Serve as the primary SOX liaison to Intuit's Technology organization building strong partnerships with tech process and control owners and Tech Compliance organization to drive a scalable, well-designed control environment across ITGCs, access controls, change management, and automated and application controls.
• Own and operationalize Intuit's AI SOX Governance Framework, including intake, risk classification, control design standards, and lifecycle oversight for AI and ML systems with financial reporting impact. Align the framework with data governance, model risk management, and cybersecurity domains to ensure a cohesive and non-duplicative control environment.
• Evaluate the design and operating effectiveness of controls across technology, AI, and data environments assessing control changes, new system implementations, and business process transformations for SOX impact and providing clear, actionable recommendations to process and control owners.
• Lead and participate in ITGC and automated/application control walkthroughs with external auditors and co-source teams, ensuring thorough documentation of process flows, risk linkage, and control design rationale.
• Support the deficiency evaluation process including root cause analysis, impact assessment, management action plan development, and remediation monitoring and validation through to closure.
• Perform quality assurance review of co-sourced SOX team workpapers and assist in preparation of SOX materials for senior leadership, the Audit & Risk Committee, and Disclosure Committee translating complex technology and controls topics into clear, audience-appropriate communications.
• Ensure SOX protocols, SOPs, and templates related to IT and AI controls are regularly reviewed, updated, and operationalized across the SRCO team. Monitor the evolving regulatory environment (PCAOB, SEC) and incorporate relevant changes into program policy and training.
• Partner with process owners, control owners, and Tech Compliance to drive awareness and understanding of SOX requirements, ITGC and AI control design standards, and enterprise control strategy. Support and co-develop training and enablement initiatives for technology stakeholders.
• Proactively lead and influence cross-functionally and at all levels of management. Cultivate strong relationships with leaders in Finance, Accounting, and Technology to facilitate timely, high-quality decision-making in connection with the SOX control environment and related financial and technology risk.
• Lead with a transformational and forward-looking mindset to drive operational excellence and continuous improvement across the IT and AI dimensions of Intuit's control environment.

Qualifications

• 7+ years of relevant work experience in Big 4 public accounting, risk consulting and/or SOX industry experience, with an emphasis on IT and technology risk. Fintech or software industry experience is strongly preferred.
• Must be able to work out of the San Diego, Mountain View, or Atlanta office at least 3 times a week.
• Bachelor's or Master's degree in a relevant discipline such as Accounting, Finance, Computer Science, Information Systems, or equivalent. CISA, CIA, CISSP, CPA, AWS Certified Cloud Practitioner, or equivalent certifications preferred.
• Deep expertise in IT General Controls (ITGCs), automated and application controls, and the PCAOB standards and COSO framework governing technology risk in a SOX context.
• Demonstrated experience designing or governing AI/ML controls frameworks, model risk management programs, or technology governance policies particularly in contexts with financial reporting or regulatory implications.
• Demonstrated ability to assess process and control changes, evaluate risk, and advise on control and process design in fast-paced, evolving technology environments.
• Proven ability to leverage AI tools and emerging technologies to rethink and redesign processes, reduce manual burden, and drive measurable efficiencies applying an AI-first mindset to how SOX work gets done, not just what it governs.
• Excellent interpersonal skills. Demonstrated ability to influence cross-functionally and at all levels of management and effectively navigate the social dynamics of teams, groups, and organizations including technical and engineering audiences.
• Proven leadership and process management skills, including the ability to own, drive, and deliver on multiple complex and ambiguous workstreams simultaneously with high quality and appropriate urgency.
• Excellent written and verbal communications, presentation, and influencing skills. Superior ability to clearly articulate complex technical and controls topics and adjust communication style and content to suit audience needs from engineering teams to audit committees.
• Ability to simplify complex concepts into clear, action-oriented communications and work through ambiguity, with confidence in making tough calls and leading through adversity with a sharp focus on driving the right outcomes.
• Ability to proactively look ahead, anticipate questions, independently assess risk, think critically and creatively to achieve the best outcome, and escalate issues to the right level internally and externally to resolve.
• Hands-on experience with SOX tooling and GRC platforms (e.g., AuditBoard) and data analysis or visualization tools (e.g., Tableau, Smartsheet) is a plus