IT Compliance Specialist (SOX)

We are seeking a detail-oriented and analytical IT / Security Compliance Specialist to support and strengthen our SOX IT control environment. This role will be on-site in Buda, TX, and will be primarily responsible for the design, execution, documentation, and continuous improvement of IT General Controls (ITGCs), with a strong focus on SOX compliance.

In addition, this individual will play a key role in evaluating Segregation of Duties (SoD) risks within business systems as part of the user access provisioning and change management processes. The ideal candidate combines technical understanding of IT systems with strong knowledge of internal controls and audit requirements.

This role partners closely with IT, Accounting, Operations, and business stakeholders to ensure a strong and sustainable control environment.

Key Responsibilities

SOX IT Controls (Primary Focus)
• Support the execution and maintenance of SOX IT General Controls (ITGCs), including:

o User access management (provisioning, modifications, terminations, periodic access reviews)

o Privileged access controls

o Change management controls

o IT operations controls (backups, job monitoring, incident management)
• Perform control testing, evidence collection, and documentation in support of internal and external audits.
• Identify control gaps and work with control owners to design and implement remediation plans.
• Assist in annual SOX scoping and risk assessment activities.
• Maintain clear and audit-ready documentation of control procedures, narratives, and risk/control matrices.
• Partner with external auditors to facilitate walkthroughs and testing requests.

Segregation of Duties (SoD) & Access Governance
• Evaluate Segregation of Duties risks as part of user access requests and role design.
• Review and assess access requests for conflicts within ERP and other key financial/business systems.
• Recommend mitigating controls where SoD conflicts cannot be avoided.
• Assist in maintaining and refining SoD matrices and access governance frameworks.
• Support periodic user access reviews and certification processes.

Process Improvement & Governance
• Drive continuous improvement of control processes to increase efficiency and automation.
• Assist in the implementation or optimization of GRC tools and access governance platforms.
• Provide training and guidance to control owners and system administrators.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to View email address on click.appcast.io learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy:


Required Skills & Experience
• Bachelor's degree in Information Systems, Accounting, Cybersecurity, or related field.
• Ability to commute to and work out of the corporate office in Buda, TX.
• 2-5+ years of experience in IT audit, IT compliance, SOX, or IT risk management.
• Strong understanding of:

o SOX ITGC requirements

o User access management controls

o Change management controls

o Segregation of Duties concepts
• Experience working with ERP systems (e.g., SAP, Oracle, Vista Viewpoint, etc.).
• Experience supporting external audit requests.
• Strong documentation and organizational skills.
• Ability to communicate effectively with both technical and non-technical stakeholders.


Nice to Have Skills & Experience
• Professional certifications such as CISA, CIA, or CISSP (or in progress).
• Experience in a public company SOX environment.
• Familiarity with automated control monitoring and access governance solutions.
• Experience with Service Management platforms (e.g., Jira, ServiceNow).


Benefit packages for this role will start on the 1st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.