SOX Auditor - IT Controls Manager

Responsibilities

ITGC SOX Controls Testing

• Lead independent testing of IT General Controls across access management, change management, and system operations.
• Evaluate the design and operating effectiveness of IT controls across applications and infrastructure supporting blockchain operations, digital asset custody, and crypto trading platforms.
• Document testing procedures and results to Internal Audit and external auditor quality standards.
• Identify new systems, applications, or process changes and assess their SOX implications with the SOX Compliance team.
• Build and maintain testing programs, templates, and workpapers for repeatable, scalable IT SOX testing.
• Use AI-enabled workflows and data analytics to improve testing coverage and efficiency.

Remediation Validation and Issue Management

• Independently validate remediation of open SOX findings, including material weaknesses and significant deficiencies.
• Perform root cause analysis and assess the severity and pervasiveness of exceptions to inform deficiency classification.
• Evaluate whether remediation actions are adequately designed and operating effectively before closing findings.
• Track remediation progress, escalate delays or gaps, and report status to Internal Audit leadership and the Audit Committee.
• Coordinate with SOX Compliance on remediation expectations, timelines, and evidence requirements.

Stakeholder Engagement and Reporting

• Serve as an Internal Audit point of contact for IT control owners across Engineering, Infrastructure, Security, and IT Operations.
• Translate audit methodology and technical findings for engineering teams, control owners, senior leadership, external auditors, and the Audit Committee.
• Contribute to reporting on IT SOX testing coverage, findings, and remediation status.
• Partner with business-process SOX testers and co-sourced resources to coordinate coverage across the SOX program.

Requirements

• 8+ years of experience in IT audit, internal audit, external audit, or SOX compliance, with significant IT general controls testing experience.
• Experience in crypto, fintech, payments, or technology-intensive environments with complex, rapidly evolving infrastructure.
• CISA and CPA certifications required; candidates actively pursuing one certification while holding the other may be considered.
• Strong knowledge of ITGC frameworks, SOX compliance requirements, COSO, COBIT, and PCAOB auditing standards as applied to IT controls.
• Hands-on experience testing ITGCs across access management, change management, and system operations.
• Technical fluency with enterprise technology environments, including systems, databases, and deployment pipelines.
• Understanding of how IT controls support reliable financial reporting and affect business process controls and financial statements.
• Experience working with or alongside external auditors; Big Four experience preferred.
• Experience operating across multiple entities or jurisdictions.
• Strong communication skills for translating technical IT audit findings to varied stakeholders.

Nice to Haves

• Familiarity with blockchain infrastructure, digital asset custody systems, on-chain transaction processing, or crypto-native technology environments.
• Experience with CI/CD pipelines, GitLab or similar version control systems, AWS, GCP, and modern deployment practices.
• Experience building or scaling an IT SOX testing program in a growth-stage or first-year SOX company.
• Familiarity with AuditBoard or Workiva.
• Familiarity with AI-assisted audit tools and willingness to adopt emerging technologies.