IT SOX Controls Specialist

What you'll do

• Manage the end-to-end SOX assessment lifecycle for third-party applications, including identification, risk tiering, and control mapping.
• Evaluate and review third-party SOC 1 and SOC 2 reports to identify gaps and necessary compensating controls.
• Design and implement internal controls for risks arising from third-party systems impacting financial reporting.
• Create and maintain SOX-ready documentation such as risk and control matrices, narratives, and process flow diagrams.
• Project manage the implementation of controls for new third-party system migrations and integrations.
• Collaborate with IT, Procurement, and business stakeholders to integrate control requirements into vendor onboarding processes.
• Review Information Produced by the Entity (IPE) from third-party systems for completeness and accuracy.
• Track control deficiencies and coordinate root cause analysis and corrective action plans with process owners.

What we're looking for

• Bachelor's degree in Accounting, Information Systems, Finance, or a related field.
• Master's degree in Accounting, Information Systems, Finance, or a related field (preferred).
• Technical certification such as CPA, CIA, CISA, or PMP.
• 10+ years of work experience in managing and/or assessing SOX programs.
• Big 4 audit firm or equivalent audit experience.
• Expertise in SOX business process program design, control implementation, and monitoring.
• Hands-on experience evaluating third-party SOC reports (SOC 1 / SOC 2) and assessing CUEC coverage.
• Knowledge of IT general controls, application-level controls, technical accounting, and financial reporting systems.
• Experience in early-stage public companies (preferred).
• Experience in online payments, ecommerce, SaaS, Payments, Fintech, or Financial Services industries (preferred).
• Experience with JIRA and AuditBoard (preferred).
• Familiarity with third-party risk management (TPRM) frameworks and vendor risk programs (preferred).