Senior Manager, IT SOX

Responsibilities

• Advise on designing an IT control environment for an AI-first company, including highly automated DevOps pipelines and agentic identity models.
• Partner with Engineering, Security, IT, and DevOps teams to assess scalable controls and new system implementations or changes.
• Identify automation and tooling opportunities, and contribute to continuous control monitoring.
• Assist with annual SOX IT assessment scoping and planning.
• Execute IT SOX testing across IT General Controls and IT Application Controls, including access management, change management, and computer operations.
• Perform system and process risk assessments, identify control gaps, and recommend remediation.
• Maintain control documentation and audit-ready evidence.
• Evaluate automated IT controls and support migration from manual to automated control reliance.
• Scale the IT SOX program by rationalizing scope, standardizing testing, and building repeatable processes.
• Guide internal team members and co-sourced partners, including prioritization, workpaper review, and quality oversight.
• Build relationships with control owners and translate technical control requirements for technical and non-technical stakeholders.
• Support SEC cybersecurity disclosure requirements and related risk monitoring.
• Coordinate with external auditors on evidence requests, walkthroughs, and testing schedules.
• Track audit finding remediation and communicate status to stakeholders.

Requirements

• Hands-on IT audit or IT SOX compliance experience, ideally in a fast-paced technology environment.
• Deep knowledge of IT General Controls, IT Application Controls, and IT risk assessment methodologies.
• Experience auditing automated DevOps environments, including CI/CD pipelines, infrastructure as code, and automated deployments.
• Experience designing, testing, and documenting access management, change management, and computer operations controls.
• Ability to guide internal team members or co-sourced partners.
• Ability to independently manage complex, ambiguous workstreams and communicate with senior stakeholders.
• Strong project management, organizational, and attention-to-detail skills.
• Clear communication across technical and non-technical audiences.
• Bachelor's degree or equivalent combination of education, training, and experience.

Nice-to-haves

• 8+ years of hands-on IT audit and SOX compliance experience, including Big Four or comparable experience.
• Experience with cloud environments such as Google Cloud, AWS, or Azure.
• Experience at a pre-IPO or newly public technology company.
• Experience scaling audit or SOX programs during rapid growth.
• Familiarity with Workday, Salesforce, or GitHub.
• Experience evaluating SDLC controls in modern software development environments.
• CISA, CIA, CISSP, CPA, or equivalent certification.
• Experience applying AI to audit work and evaluating controls in AI-enabled processes.

Compensation

• Annual salary: $230,000–$300,000 USD.