Description
We are looking for an IT SOX expert to join our Security Controls team, which plays a vital role in safeguarding Wise's complex IT landscape. The successful candidate will drive scope rationalization, dependency mapping, and control optimization.
Responsibilities:
- Analyze and challenge existing IT SOX scope across applications and infrastructure
- Identify duplicate, redundant, or over-engineered ITGCs/ITACs and propose enhancements
- Establish RACMs (Risk and Control Matrices) and identify necessary ITGCs and ITACs for newly in-scope SOX applications and platforms
- Document and maintain end-to-end dependency maps for management review
- Support control testing (Design & Operating Effectiveness) across our cloud infrastructure and SaaS landscape
- Partner with key stakeholders across Finance, Risk, Security, Platform to effectively communicate SOX 404 requirements and expectations
Qualifications:
- 3+ years of experience in Technology Risk or IT Audit, with a dedicated focus on SOX
- Deep knowledge of SOX 404 requirements, COSO framework, and IT control frameworks (NIST, ISO27001)
- Demonstrable experience with first-time SOX audits in cloud-native environments
- Understanding of how compliance frameworks map to dynamic infrastructures
- Experience with AWS, Terraform, GitHub, Jira, Okta, and SailPoint is preferred
- Ability to translate technical architecture details into audit-ready documentation
- Strong communication skills to explain compliance requirements to engineers