Manager – IT SOX

What you'll do

• Review data flow within newly added IT applications/infrastructure and identify relevant applications/tools and related ITGC and ITAC controls to be scoped for IT SOX audit
• Assess existing ITGCs and ITACs and incremental controls to be scoped for testing
• Review key reports used for financial reporting for accuracy, completeness and integrity
• Identify, prepare or modify control language for existing and new applications/tools controls for ITGC and ITAC and align with process owners/stakeholders
• Conduct process walkthroughs, perform Test of Design and Operating Effectiveness testing, review work completed by IT SOX team
• Ensure timely completion of testing as per plan and provide regular updates to Internal Audit Head
• Review testing documentation/observations with Internal Audit Head, align observations with process owners/stakeholders, suggest improvements, follow up on remedial actions and perform remediation testing
• Prepare periodic IT SOX updates for Senior Leadership and/or Audit Committee
• Support Internal Audit Head in annual IT Risk Assessment
• Collaborate with Information Security Team, process owners and external auditors
• Support ad hoc IT audit assignments

Requirements

• Solid understanding of IT SOX audit requirements including IT Risk assessment and SOX Scoping processes
• Knowledge on key report and ITAC testing
• Ability to identify appropriate ITGC and ITAC controls for newly scoped in applications
• Ability to manage assignments independently, maintain data integrity/accuracy
• Ability to plan, organize and prioritize multiple tasks within a defined timeline
• Good communication (written and oral) with ability to articulate points effectively
• Strong teamwork and collaboration skills
• 5 to 8 years IT SOX Audit experience
• CA qualification or CISA certification preferred
• Knowledge in Workiva tool or similar audit tool is an advantage

Tech stack