Description
We are looking for an IT SOX Controls Tester to join our Security Controls team and help us build a global platform that's scalable, reliable, and secure.
Your mission:
- Perform control testing (Design & Operating Effectiveness) for Access Management, Change Management, and IT application controls across our cloud infrastructure and SaaS landscape.
- Partner with key stakeholders across Finance, Risk, Security, Platform to effectively communicate SOX 404 requirements and expectations.
- Support control owners on their journey to mature our risk and control environment.
- Leverage data analytics and automation to assess control design and operating effectiveness.
- Maintain a high standard of quality in documentation, ensuring that testing methods are in compliance with SOX 404 requirements.
Qualifications:
- Deep knowledge of SOX 404 requirements, COSO framework, and IT control frameworks (NIST, ISO27001).
- 3+ years of experience in Technology Risk or IT Audit, with a dedicated focus on SOX.
- Demonstrable experience with first-time SOX audits in cloud-native environments.
- Understanding of how Change Management works in a CI/CD pipeline and how Access Management works in a microservices architecture.
- Experience with AWS, Terraform, GitHub, Jira, Okta, and SailPoint is preferred.
- Drive to modernize testing methodologies, utilizing data analytics and automation to reduce reliance on manual processes and enhance control coverage.
- Ability to work well in a cross-functional environment and articulate complex control findings to engineers and finance stakeholders.