Want to know if this job is worth applying to?
United States
Remote only
This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Sr. Manager, IT SOX Compliance based in the United States.
Join a dynamic, multi-brand organization as a senior leader responsible for strengthening IT compliance and safeguarding the integrity of financial reporting. In this remote role, you will lead the execution and continuous improvement of the IT Sarbanes-Oxley (SOX) compliance program across systems, applications, and infrastructure. You will oversee IT General Controls (ITGCs), assess risks, and ensure internal controls meet regulatory and audit requirements. Working closely with IT teams, business stakeholders, and external auditors, you will drive accountability, resolve control deficiencies, and support timely remediation. Your expertise will help enhance governance, improve operational effectiveness, and establish consistent compliance practices across the organization. This opportunity is ideal for an experienced IT audit and compliance professional who combines technical knowledge, strategic thinking, and collaborative leadership.
Lead the IT SOX compliance program: Manage and continuously improve compliance activities in alignment with Sarbanes-Oxley requirements, ensuring effective internal controls over financial reporting across in-scope IT systems and infrastructure.
Develop and maintain documentation: Oversee IT SOX documentation, including process narratives, flowcharts, risk-control matrices, and supporting evidence for current and future compliance requirements.
Monitor IT General Controls: Evaluate control design and operating effectiveness, identify weaknesses, assess risks, and work with control owners to implement appropriate corrective actions.
Drive remediation initiatives: Coach ITGC control owners on control improvements, establish remediation plans and deadlines, and monitor progress to ensure deficiencies are resolved efficiently.
Coordinate audits and assessments: Serve as a key liaison between auditors and internal stakeholders, facilitating audit preparation, sample selection, evidence collection, certification activities, and timely delivery of required documentation.
Oversee access and vendor controls: Support the completion of User Access Reviews (UARs) and Service Organization Control (SOC) reviews for software-as-a-service (SaaS) providers.
Track compliance performance: Monitor IT SOX program KPIs, evaluate the overall IT control environment, and identify opportunities to reduce risk and strengthen compliance practices.
Collaborate across the organization: Partner with IT teams and other business functions to define, implement, and maintain control requirements across relevant systems and processes.
Support continuous improvement: Lead or contribute to IT compliance projects, process enhancements, change management initiatives, and other activities that strengthen the organization's control framework.
Professional experience: At least 10 years of experience in IT audit, IT compliance, or IT SOX compliance, including a thorough understanding of IT General Control objectives.
Leadership experience: A minimum of 3–5 years in an IT SOX management role, with experience overseeing compliance programs, coordinating stakeholders, and driving remediation activities.
Education: Bachelor's degree in Information Systems, Accounting, Finance, or a related field.
Certifications: At least one relevant certification or credential is required, such as Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Certified Public Accountant (CPA), ITIL, CRISC, or an equivalent risk-focused qualification.
Regulatory and control frameworks: Strong knowledge of SOX Section 404, the COSO framework, and IT control frameworks such as COBIT or NIST.
Governance and audit tools: Experience using governance, risk, and compliance (GRC) platforms and audit management tools, such as Oracle GRC or AuditBoard.
Cloud and SaaS expertise: Familiarity with cloud environments, including AWS, Google Cloud Platform (GCP), and Microsoft Azure, as well as SOC evaluations for SaaS providers.
Enterprise systems knowledge: Experience with ERP platforms such as Oracle, SAP, or Workday, along with IT infrastructure and tools including password vaults, ticketing systems, single sign-on (SSO), Active Directory, and data warehouses.
Communication and collaboration: Ability to work effectively with cross-functional teams, explain technical control requirements to non-technical stakeholders, and build productive relationships with auditors and control owners.
Analytical and organizational skills: Strong attention to detail, excellent organizational abilities, effective prioritization, and a proven capacity to meet deadlines in a complex environment.
Change management and ownership: Demonstrated ability to influence organizational change, take responsibility for outcomes, resolve issues proactively, and drive compliance initiatives through to completion.
Annual base salary: $103,200–$184,300, depending on location, relevant experience, qualifications, and skills.
Additional compensation: Potential eligibility for supplemental compensation, including bonuses or other incentive payments, depending on the role.
Remote work: Remote position based in the United States, offering flexibility in your work environment.
Health and wellness: Access to a range of health and wellness benefits.
Paid time off: Paid leave programs and holiday pay.
Flexible access to earnings: A wage-access program that allows eligible employees to access up to 50% of their earned wages through myFlexPay.
Professional impact: An opportunity to lead enterprise-level compliance initiatives, collaborate with senior stakeholders, and contribute to stronger financial reporting controls and risk management practices.
