IT SOX Manager

IT SOX Manager

The IT SOX Manager is a critical global role responsible for ensuring the effective design, implementation, and operation of IT controls in compliance with SOX requirements. This position works closely with control owners, supporting teams, and external auditors to manage the SOX IT control framework, assist in remediation efforts, and support the growth of IT controls for non-SOX applications. This role reports to the Sr. Manager of Global IT Governance and Risk within the CISO organization.

Manage SOX IT Controls: Ensure controls operate effectively per schedule, coordinate testing and audits, and provide quarterly status updates to leadership. Enhance Control Design: Guide control owners on design improvements, identify gaps, and recommend enhancements for compliance and operational excellence. Oversee Remediation Efforts: Track, report, and support the resolution of control deficiencies, ensuring audit readiness. Expand IT Controls Beyond SOX: Develop and refine IT controls for non-SOX applications, ensuring consistency and risk mitigation. Provide Training and Support: Develop SOX training materials, conduct training sessions, and assist new control owners and application administrators. GRC Application Management: Manage the company's GRC tool for effective control tracking and assessments. Prepare for Stricter Compliance: Drive IT control enhancements to address increased scrutiny and skepticism from external auditors and stricter regulatory standards

Education and Certification:

• Bachelor's degree in information technology, Computer Science, Business Administration, or a related field.
• Professional certifications such as CISA, CRISC, or CISSP are preferred.

Experience:

• 5+ years of experience in IT SOX compliance, IT audit, or IT risk management in a global organization.
• Proven experience with IT general controls (ITGCs), SOX 404, and related frameworks (e.g., COBIT, COSO).
• Familiarity with ERP systems, cloud platforms, and GRC tools is highly desirable.

Skills and Competencies:

• Strong analytical and problem-solving skills with the ability to identify risks and recommend solutions.
• Excellent communication and interpersonal skills to collaborate with diverse teams and stakeholders globally.
• Strong knowledge of IT control design, operation, and testing methodologies.
• Detail-oriented with strong organizational skills to manage multiple priorities effectively.
• Ability to work both independently and collaboratively as part of a global team.

Additional Information:

• Limited travel required (less than 10%).
• This position will have direct reports but is also expected to work as an individual contributor as needed.
• This position requires a proactive approach to driving global IT compliance and control improvements.