# IT SOX Controls Specialist

**Company:** [Stripe](https://hotfix.jobs/companies/stripe)
**Location:** Unspecified
**Role:** Finance & Accounting
**Experience:** 10+ years
**Skills:** sox, soc 1, SOC 2, ssae 18, isae 3402, cisa, CPA, cia, pmp, it general controls, application controls, auditboard, Jira, third-party risk management, risk and control matrices
**Posted:** 2026-08-07

> Owns SOX assessments and control design for third-party applications affecting financial reporting. The role requires 10+ years of SOX experience, audit expertise, technical certification, and hands-on evaluation of SOC reports and CUECs.

## Job Description

## Responsibilities

- Own the end-to-end SOX assessment lifecycle for third-party applications in scope for financial reporting, including identification, risk tiering, and control mapping.
- Lead the evaluation and review of third-party SOC 1 and SOC 2 reports (SSAE 18 / ISAE 3402), assessing complementary user entity controls (CUECs) and identifying gaps requiring compensating controls.
- Design and implement controls addressing risks from third-party systems and integrations that affect the financial reporting supply chain.
- Develop and maintain SOX-ready documentation, including risk and control matrices (RCMs), narratives, and process flow diagrams.
- Project manage control definition and implementation for third-party system implementations, migrations, and integrations with financial reporting impact.
- Partner with IT, Procurement, and business stakeholders to embed control requirements into vendor onboarding and periodic review processes.
- Review information produced by the entity (IPE) sourced from third-party systems for completeness and accuracy.
- Assess and track control deficiencies identified through third-party reviews, coordinating root cause analysis and corrective action plans.
- Support the 302 and 404 sub-certification process for third-party application risks and controls.
- Monitor the third-party application landscape for emerging financial reporting risks and develop control plans.
- Contribute to SOX program improvements, including automation and optimization of third-party control monitoring.

## Requirements

- Bachelor's degree in Accounting, Information Systems, Finance, or a related field.
- Technical certification such as CPA, CIA, CISA, or PMP.
- **10+ years of experience** managing and/or assessing SOX programs.
- Big Four audit firm or equivalent audit experience.
- Extensive experience with SOX business process program design, control implementation, and program monitoring.
- Hands-on experience evaluating third-party SOC reports, including SOC 1 and SOC 2, and assessing CUEC coverage and gaps.
- Familiarity with IT general controls and application-level controls in financial reporting systems.
- Strong knowledge of technical accounting, order-to-cash, and financial close and reporting controls.
- Strong communication skills, including presenting to and influencing senior business leaders.
- Demonstrated ability to manage concurrent workstreams and projects independently.

## Preferred Qualifications

- Experience implementing internal controls in early-stage public companies.
- Experience in online payments, ecommerce, SaaS, payments, fintech, or financial services.
- Experience with JIRA and AuditBoard.
- Familiarity with third-party risk management frameworks and vendor risk programs.

## Similar roles

- [Strategic Finance, B2B Product](https://hotfix.jobs/jobs/ffc5a714-9b8f-41dd-afbd-d2f83548c72c) - OpenAI - San Francisco, CA - $234k – $260k/yr
- [Treasury Manager](https://hotfix.jobs/jobs/e34105b6-5cda-4d8d-9584-6ceedeb0db68) - Notion - San Francisco, CA - $200k – $230k/yr
- [Funding & Liquidity Manager](https://hotfix.jobs/jobs/e42b1f78-8b1d-4a08-9aad-d1bc6e54bd18) - Upstart - Remote - $160k – $221k/yr
- [Staff Accountant](https://hotfix.jobs/jobs/708f2c0b-dbd0-4aea-a8fc-8bf2e4bfc288) - PDQ - South Salt Lake, UT
- [Controller](https://hotfix.jobs/jobs/3284883c-dae6-48e7-b4b0-7102911d95d5) - Alchemy - New York, NY - $200k – $265k/yr

**Apply:** https://hotfix.jobs/jobs/1f88533f-6c3c-4e05-b1f3-2ab9095c9e5c
**Canonical:** https://hotfix.jobs/jobs/1f88533f-6c3c-4e05-b1f3-2ab9095c9e5c