Senior Engineer, Information Security & Risk

What you'll do

• Perform IT risk assessments for pilot areas to identify control gaps and provide remediation guidance.
• Design and implement effective IT controls to ensure organizational SOX compliance goals are met.
• Improve existing IT controls to increase operational efficiency and reduce the likelihood of failure.
• Monitor and evaluate the execution of IT controls to ensure they operate effectively.
• Support due diligence for M&A activities and review third-party certifications like SOC1/2.
• Align with internal and external auditors to define SOX scope and audit strategies.
• Track and drive the remediation of IT control issues within the risk governance process.
• Manage junior staff and contractors while overseeing the budget for compliance workstreams.

What we're looking for

• Bachelor’s degree in a related field or equivalent work experience.
• Deep knowledge of IT SOX control and audit methodology.
• Strong understanding and experience with SOX is required.
• Strong root cause analysis and problem-solving skills are required.
• Strong knowledge of IT technologies including networks, databases, middleware, interfaces, and applications.
• 6+ years of experience in a related field such as IT audit or IT compliance (preferred).
• Knowledge of other compliance frameworks like HIPAA, GDPR, or PCI (plus).
• Professional certifications such as CISA, CPA, CISM, CISSP, or CRISC (preferred).