SOX Identity and Access Management Governance Strategist

As an ITGC subject matter expert within the Technology, Data & Operations (TD&O) SOX Governance Team, you will focus on Identity & Access Management (IAM) and logical security‑related SOX controls. This is an office‑centric role, 5 days a week, located in Atlanta or Charlotte/Cascade hub. This position does not sponsor work visas or provide immigration‑related support. Key Responsibilities ITGC Risk & Control Expertise (Logical Security Focus) Understand and apply IT general controls in areas such as provisioning, de‑provisioning, access reviews, privileged access, authentication methods, and system access governance. Evaluate emerging risks, control failures, and design opportunities. Identify control gaps or deficiencies and recommend risk‑based remediation strategies. Translate technical problems into SOX impact assessments and support control owners in designing sustainable improvements. Contribute to or own routine SOX reporting cycles, including executive‑level updates, committee reporting, and escalation of emerging or systemic risks. Coordinate with internal and external auditors on ITGC walkthroughs, manage evidence requests, and clarify process or control questions. Track SOX issues and remediation plans, applying structured project management and influencing teams for timely closure. Provide SOX and IT risk perspective during new technology initiatives, system changes, or IAM/security process redesigns. Required Qualifications Bachelor’s degree in Business, Finance, Communications or an equivalent field. Eight to twelve years of financial services or risk management experience. Strong interpersonal, analytical, critical thinking, and organizational skills. Excellent verbal and written communication, presentation and facilitation skills. Planning ability with sound judgment, problem‑solving and decision‑making skills. Proficiency in basic computer applications such as Microsoft Office. Preferred Qualifications Seven or more years of experience auditing SOX 404 / 302 ITGC controls, especially in logical security and IAM. Knowledge of IAM concepts such as provisioning, de‑provisioning, role‑based access, privileged access management, authentication/authorization mechanisms, and access review processes. Hands‑on or oversight experience with IAM platforms such as SailPoint, Active Directory / Azure AD, CyberArk, etc. Experience supporting or executing ITGC walkthroughs, control testing, or evaluating IT control deficiencies. Familiarity with SOC 1 / SOC 2 reporting and related control environments. Benefits All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits. Eligible employees receive medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax‑preferred savings accounts, and a 401(k) plan, plus at least 10 days of vacation and 10 sick days during the first year. Additional benefits may include a defined benefit pension plan, restricted stock units, or a deferred compensation plan, depending on the division. EEO Statement Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship, national origin, age, sexual orientation, gender identity, disability, veteran status, or any other protected class. Truist is a Drug‑Free Workplace. #J-18808-Ljbffr Truist