Senior SOX Auditor

Responsibilities

SOX Business Process Controls Testing

• Lead the execution of independent controls testing across business process areas including revenue, financial close, and treasury.
• Evaluate the design and operating effectiveness of key controls, document testing procedures and results, and ensure workpapers meet Internal Audit and external auditor quality standards.
• Validate the completeness and accuracy of Information Used in Controls (IUC) and Information Produced by the Entity (IPE), ensuring the reliability of data underpinning control performance.
• Build and maintain testing programs, templates, and workpapers that create a repeatable, scalable foundation for business process SOX testing.
• Identify opportunities to leverage AI-enabled workflows and data analytics to improve testing coverage and efficiency.

Remediation Validation & Issue Management

• Independently validate the remediation of open SOX findings, including material weaknesses and significant deficiencies, across business process control areas.
• Evaluate control deficiencies by performing root cause analysis and assessing the severity and pervasiveness of exceptions to inform deficiency classification.
• Assess whether management’s remediation actions are adequately designed and operating effectively before closing findings.
• Track remediation progress, escalate delays or gaps, and report status to Internal Audit leadership and the Audit Committee as required.
• Coordinate with the SOX Compliance team to ensure alignment on remediation expectations, timelines, and evidence requirements.

Stakeholder Engagement & Reporting

• Serve as a trusted Internal Audit point of contact for business process control owners across Finance, Accounting, and Treasury.
• Contribute to Internal Audit reporting to the Audit Committee, external auditor, and senior leadership on business process SOX testing coverage, findings, and remediation status.
• Partner with the IT SOX tester and co-sourced resources to ensure coordinated testing coverage across the full SOX program.

Requirements

• 8+ years of experience in internal audit, external audit, or SOX compliance, with significant exposure to business process controls testing.
• CPA or ACCA certification required.
• Experience in crypto, fintech, payments, or digital asset accounting — including revenue recognition for trading, staking, or custody services.
• Strong knowledge of US GAAP, SOX compliance requirements, COSO framework, and PCAOB auditing standards as they apply to business process controls.
• Hands-on experience testing controls across revenue, financial close, treasury, or other core financial reporting processes.
• Experience operating across multi-entity structures or multiple jurisdictions.
• Effective communicator who can translate audit findings and control observations for control owners, senior leadership, and external stakeholders.

Nice-to-Haves

• Familiarity with audit management platforms such as AuditBoard or Workiva.
• Exposure to global regulatory environments and multi-entity control structures.
• Familiarity with AI-assisted audit tools and willingness to adopt emerging technologies.