This role pays less than
86%
of similar roles. Most pay
$142,337–$196,433
— the shaded band above.
At the midpoint, this role pays about
$133k
versus about
$169k
for comparable roles.
Based on 240 similar postings.
Employer
About HP Inc.
HP Inc. is a global technology company that develops and sells personal computers, printers, and related supplies and services. Its products include laptops, desktops, workstations, and printing solutions for consumers and businesses worldwide.
HP Inc. currently has
104 open roles
on FindRole.
Listed pay typically runs
$130,700–$205,200
across 90 roles with salary data.
The SOX Compliance Lead joins the Security, Risk Management, & Compliance department to manage and execute the compliance and internal control testing processes related to SOX. This role involves partnering with Engineering, IT, Finance, and Internal Audit to ensure that internal controls over financial reporting are designed and operating effectively. Key responsibilities include identifying and evaluating ITGCs across access controls, change management, system operations, and the SDLC, while performing walkthroughs for key financial systems. The candidate will also support Shift-Left and Agentic AI initiatives to automate processes and reduce compliance burdens. Required expertise includes ICOFR, IT General Controls, and experience with SOC reports. Technical competencies include knowledge of NIST CSF, ISO 27001, and auditing source code repositories like GitHub to ensure adherence to various security and privacy regulatory requirements.
Manage and execute the SOX compliance program including scoping, risk assessment, testing, and remediation.
Identify and evaluate IT General Controls (ITGCs) across access controls, change management, system operations, and SDLC.
Perform walkthroughs and test controls for key financial systems and supporting infrastructure.
Track, document, and communicate control deficiencies and remediation plans to leadership.
Serve as the primary liaison between Engineering, IT, internal audit, and external auditors during SOX reviews.
Develop and maintain SOX documentation including risk/control matrices, process narratives, and flowcharts.
Support other security and privacy compliance requirements such as ISO, SOC2, GDPR, and AI Act regulations.
Integrate Agentic AI into the SDLC to automate processes and reduce manual compliance burdens.
What we're looking for
Bachelor's degree in Business Administration, Accounting, Management Information Systems (MIS), Computer Science, or a related field.
8+ years of experience in IT Audit, IT Compliance, or a related discipline with direct SOX IT compliance experience.
Strong understanding of internal control over financial reporting (ICFR), risk assessment, IT General Controls (ITGC), and PCAOB expectations.
Experience testing ITGCs for applications, operating systems, and databases while validating the completeness and accuracy of audit evidence.
Proficiency in managing SOX programs including scoping, risk assessment, testing, remediation, and maintaining documentation like risk/control matrices.
Ability to communicate effectively with internal and external auditors to ensure findings are risk-based and practical.
Knowledge of SOC reports and various security/privacy frameworks such as ISO 27001, NIST CSF, and GDPR.
Preferred certifications include CISA, CISM, CRISC, CISSP, or similar credentials.
Excel
Microsoft Power Automate
SharePoint
Microsoft Word
PowerPoint
AI-enabled tools
Automation
GDPR
LGPD
Risk Assessment
Compliance Monitoring
Process Improvement
Data Integrity
Project Management