IT SOX Controls Tester - Cloud Assurance

What you'll do

• Perform control testing for Access Management, Change Management, and IT application controls in cloud infrastructure.
• Communicate SOX 404 requirements to Finance, Risk, Security, and Platform stakeholders.
• Support control owners in maturing risk and control environments.
• Use data analytics and automation to assess control design and effectiveness.
• Ensure documentation complies with SOX 404 requirements for testing methods.

What we're looking for

• Deep knowledge of SOX 404 requirements, COSO framework, and IT control frameworks.
• 3+ years of experience in Technology Risk or IT Audit with a focus on SOX compliance.
• Experience conducting first-time SOX audits in cloud-native environments.
• Understanding of Change Management in CI/CD pipelines and Access Management in microservices architecture.
• Proficiency with AWS, Terraform, GitHub, Jira, Okta, and SailPoint tools.
• Ability to modernize testing methodologies using data analytics and automation.
• Strong communication skills for articulating complex control findings across departments.