Senior IT SOX Compliance Administrator

The IT SOX Compliance Administrator III is responsible for ensuring the effectiveness and efficiency of IT controls and compliance with the Sarbanes-Oxley Act (SOX). This role involves managing IT governance, risk management, and compliance processes. Key responsibilities include conducting risk assessments, performing audits, and developing IT control frameworks. The position requires significant autonomy, problem-solving skills, and technical judgment to identify potential compliance issues and recommend corrective actions. The position possesses a strong background in IT controls, SOX compliance, and risk management, with the ability to coordinate with cross-functional teams and communicate findings to senior managementConduct periodic risk assessments and control reviews to identify gaps and recommend improvements to strengthen the IT control environment.Perform walkthroughs and testing of ITGCs and automated controls for SOX complianceEvaluate controls over areas such as access management, change management, system development, operations and configurationDocument findings, identify control gaps, and work with IT and business teams to develop remediation plansPrimary liaison coordinating with external auditors and internal stakeholders to ensure timely and accurate testing and reportingAssist in the maintenance of SOX documentation, including control matrices and process flowchartsTrack and report remediation progress for identified control deficienciesSupport continuous improvement of IT SOX compliance processes, including automation and risk-based scopingSupport system implementation and upgrades by advising on control design and ensuring new systems meet SOX and DoD compliance requirements Knowledge (Education/License/Certification, Prior Experience)Bachelor's degree in information technology, computer science, business administration, accounting, or a related field.The ideal candidate will have 2-4 years of experience as an internal or external IT auditorExperience with ITGCs and application control design and evaluation is requiredSkills and AbilitiesHands-on knowledge of key ITGC domains including logical access, change management, systems development lifecycle (SDLC), data integrity, and operations controlsExperience with ERP systems (Infor LN, Oracle, etc.), including control frameworks embedded in enterprise applicationsTravel/Physical Requirements15% travelWork environment is hybrid#LI-SW1JobFamilyInformation TechnologyJobFunctionBusiness ApplicationsPayTypeSalary