Lead, SOX Program Strategy & Audit Excellence

Company Overview Intuit is the global financial technology platform that powers prosperity for the people and communities we serve. With products like TurboTax, QuickBooks, Mailchimp, and Credit Karma, we serve over 100 million customers globally. Our mission is to power prosperity around the world — and that includes building a world‑class control environment that scales with our innovation and ambition. Team Overview The SOX Risk & Compliance Office (SRCO) is a management‑led function purpose‑built to deliver a modern, sustainable, and risk‑focused SOX program that scales with the business. SRCO enables Intuit’s continued growth by establishing a strong foundation of financial compliance, risk management, and operational excellence. We partner closely with business, technology, and assurance stakeholders to ensure financial reporting integrity and readiness for change. Within SRCO, the SOX Strategy, Operations & Audit Excellence team is responsible for end‑to‑end program governance, audit lifecycle execution, strategic transformation, and operational enablement — including deep engagement with Intuit’s Technology organization on IT general controls (ITGCs), automated controls, and emerging technology risk areas including AI governance. Role Summary We’re looking for a Lead, SOX Program Strategy & Audit Excellence who thrives at the intersection of risk management, audit execution, and technology. This is a high‑impact individual contributor role reporting to the Senior Manager, SOX Strategy, Operations & Audit Excellence. This role carries two significant and highly visible areas of ownership: (1) serving as the primary SOX liaison to Intuit’s Technology organization, driving coverage, quality, and strategic improvement across IT General Controls (ITGCs) and automated/application controls; and (2) owning and operationalizing Intuit’s AI SOX Governance Framework — including risk classification, lifecycle governance, and control standards for AI and ML systems in scope for SOX. As a Lead, you will be a trusted partner to cross‑functional stakeholders across Finance, Accounting and Tech — bringing deep expertise in IT risk, automated controls, and AI governance to help the company build a scalable, well‑designed, and future‑ready control environment. Responsibilities Serve as the primary SOX liaison to Intuit’s Technology organization — building strong partnerships with tech process and control owners and Tech Compliance organization to drive a scalable, well‑designed control environment across ITGCs, access controls, change management, and automated and application controls. Own and operationalize Intuit’s AI SOX Governance Framework, including intake, risk classification, control design standards, and lifecycle oversight for AI and ML systems with financial reporting impact. Align the framework with data governance, model risk management, and cybersecurity domains to ensure a cohesive and non‑duplicative control environment. Evaluate the design and operating effectiveness of controls across technology, AI, and data environments — assessing control changes, new system implementations, and business process transformations for SOX impact and providing clear, actionable recommendations to process and control owners. Lead and participate in ITGC and automated/application control walkthroughs with external auditors and co‑source teams, ensuring thorough documentation of process flows, risk linkage, and control design rationale. Support the deficiency evaluation process including root cause analysis, impact assessment, management action plan development, and remediation monitoring and validation through to closure. Perform quality assurance review of co‑sourced SOX team workpapers and assist in preparation of SOX materials for senior leadership, the Audit & Risk Committee, and Disclosure Committee — translating complex technology and controls topics into clear, audience‑appropriate communications. Ensure SOX protocols, SOPs, and templates related to IT and AI controls are regularly reviewed, updated, and operationalized across the SRCO team. Monitor the evolving regulatory environment (PCAOB, SEC) and incorporate relevant changes into program policy and training. Partner with process owners, control owners, and Tech Compliance to drive awareness and understanding of SOX requirements, ITGC and AI control design standards, and enterprise control strategy. Support and co‑develop training and enablement initiatives for technology stakeholders. Proactively lead and influence cross‑functionally and at all levels of management. Cultivate strong relationships with leaders in Finance, Accounting, and Technology to facilitate timely, high‑quality decision‑making in connection with the SOX control environment and related financial and technology risk. Lead with a transformational and forward‑looking mindset to drive operational excellence and continuous improvement across the IT and AI dimensions of Intuit’s control environment. Compensation Intuit provides a competitive compensation package with a strong pay for performance rewards approach. This position may be eligible for a cash bonus, equity rewards and benefits, in accordance with our applicable plans and programs. Pay offered is based on factors such as job‑related knowledge, skills, experience, and work location. To drive ongoing fair pay for employees, Intuit conducts regular comparisons across categories of ethnicity and gender. The expected base pay range for this position is: San Diego: 142,000-192,500 Bay Area: 152,000-206,000 Qualifications 7+ years of relevant work experience in Big 4 public accounting, risk consulting and/or SOX industry experience, with an emphasis on IT and technology risk. Fintech or software industry experience is strongly preferred. Must be able to work out of the San Diego, Mountain View, or Atlanta office at least 3 times a week. Bachelor’s or Master’s degree in a relevant discipline such as Accounting, Finance, Computer Science, Information Systems, or equivalent. CISA, CIA, CISSP, CPA, AWS Certified Cloud Practitioner, or equivalent certifications preferred. Deep expertise in IT General Controls (ITGCs), automated and application controls, and the PCAOB standards and COSO framework governing technology risk in a SOX context. Demonstrated experience designing or governing AI/ML controls frameworks, model risk management programs, or technology governance policies — particularly in contexts with financial reporting or regulatory implications. Demonstrated ability to assess process and control changes, evaluate risk, and advise on control and process design in fast‑paced, evolving technology environments. Proven ability to leverage AI tools and emerging technologies to rethink and redesign processes, reduce manual burden, and drive measurable efficiencies — applying an AI‑first mindset to how SOX work gets done, not just what it governs. Excellent interpersonal skills. Demonstrated ability to influence cross‑functionally and at all levels of management and effectively navigate the social dynamics of teams, groups, and organizations — including technical and engineering audiences. Proven leadership and process management skills, including the ability to own, drive, and deliver on multiple complex and ambiguous workstreams simultaneously with high quality and appropriate urgency. Excellent written and verbal communications, presentation, and influencing skills. Superior ability to clearly articulate complex technical and controls topics and adjust communication style and content to suit audience needs — from engineering teams to audit committees. Ability to simplify complex concepts into clear, action‑oriented communications and work through ambiguity, with confidence in making tough calls and leading through adversity with a sharp focus on driving the right outcomes. Ability to proactively look ahead, anticipate questions, independently assess risk, think critically and creatively to achieve the best outcome, and elevate issues to the right level internally and externally to resolve. Hands‑on experience with SOX tooling and GRC platforms (e.g., AuditBoard) and data analysis or visualization tools (e.g., Tableau, Smartsheet) is a plus. #J-18808-Ljbffr