Lead, IT SOX Risk Advisory

IT SOX Lead Risk Advisor

Come join Intuit as an IT SOX Lead Risk Advisor within the SOX Risk and Compliance Organization (SRCO). SRCO is a management-led function purpose-built to deliver a modern, sustainable, and risk-focused SOX program that scales with the business. SRCO enables Intuit's continued growth by establishing a strong foundation of financial compliance, risk management, and operational excellence. Within SRCO, the SOX Risk Advisory team acts as strategic advisors to business process owners, control owners, and our Technology Compliance and Risk Management Organization (TCRM) to ensure financial reporting integrity and readiness for business change.

We are seeking an IT SOX Lead Risk Advisor who thrives at the intersection of risk management, audit execution, and technology. This is a high-impact individual contributor role, reporting to the Senior Manager, SOX Technology Risk Advisory. As an IT SOX Lead Risk Advisor, you will be a trusted partner to our cross-functional stakeholders, bringing deep process and technology risk, and automated and IT general control expertise to help the company drive a scalable, well-designed control environment. You'll play a key role in financial and technology risk assessment, readiness, control optimization, and change enablement for Intuit's SOX program, including structured program management of SOX readiness initiatives from intake through external audit sign-off, and leveraging AI-enabled workflows to scale and accelerate assessment quality.

Responsibilities

• Serve as an end-to-end process and IT control expert advising control and process owners on SOX requirements, risk assessment, control design, and optimization strategies.
• Drive the readiness intake and assessment process for control changes, business process transformations, and new initiatives to identify relevant risks and SOX impact with clear and thorough rationale.
• Own end-to-end project management for SOX readiness initiatives, including scoping, milestone tracking, stakeholder coordination, issue escalation, and readiness sign-off, ensuring each initiative moves predictably from intake to control activation.
• Quickly develop a deep understanding of processes and systems to identify key financial statement and technology risks, and influence the implementation or modification of controls that are audit-effective, business-friendly, and scalable across all aspects of scoping, level of effort, and testing complexity.
• Draft risk and control matrices (RCMs), including key systems, tools, and service providers, based on review of management artifacts and walkthroughs across stakeholder groups.
• Lead structured walkthroughs and readiness operating mechanisms with engineering, product, and business control owners, driving accountability for action items and timely resolution of control design gaps.
• Design and execute new and updated testing procedures for automated controls (ITACs) to ensure control evidence and scope are sufficient and aligned with risk.
• Manage the deficiency evaluation process including root cause analysis, impact assessment, management action plan development, remediation monitoring, and validation.
• Apply AI-assisted workflows to perform SOX readiness assessments, including use of large language model tools to analyze PRDs, engineering specs, and system change documentation for ICFR risk signals, scope determinations, and control gap identification.
• Leverage AI tooling to draft control narratives, risk memos, WCGW analyses, and scoping recommendations, accelerating throughput across a high-volume readiness portfolio while maintaining audit-quality rigor.
• Cultivate strong relationships with leaders across Finance, Product Development, and the Business and partner with process owners, control owners, and the Technical Compliance team to drive timely, high-quality decision-making and awareness of SOX requirements and control strategy.
• Lead with an extreme sense of ownership and a forward-looking mindset to drive operational excellence and continuous improvement within our control environment.

Qualifications

• 8+ years of experience in internal audit, SOX compliance, risk advisory, or public accounting. Experience in the FinTech or software industry is preferred.
• Bachelor's or Master's degree in a relevant discipline such as Computer Science, Computer Engineering, or Information Systems, or equivalent experience. CISA, CISSP, AWS Certified Cloud Practitioner or above, CPA, or CIA preferred.
• Must be able to work onsite in the Atlanta, San Diego, or Mountain View office 3 days a week.
• Robust experience testing and designing complex business process ITACs, with strong understanding of technology risk, financial reporting risk, internal controls (automated and ITGC), and PCAOB requirements.
• Demonstrated project management capability, including managing multiple concurrent initiatives with distinct scope, timelines, stakeholders, and control deliverables, with high quality and appropriate urgency.
• Practical experience using AI tools (e.g., Claude, ChatGPT, Copilot) for compliance or audit work, including prompt-driven document analysis, control narrative drafting, and risk assessment. Ability to critically evaluate AI outputs for accuracy and audit defensibility is required, including comfort with structured prompting techniques to extract reliable, auditable outputs.
• Excellent interpersonal, written, and verbal communication skills with demonstrated ability to influence cross-functionally and at all levels of management.
• Strong critical thinking and communication skills, including the ability to independently simplify complex concepts, anticipate questions, make tough calls under ambiguity, and escalate issues to the right level to resolve.