Description
We are looking for an IT SOX expert to join our mission and help us build a global platform that’s scalable, reliable, and secure.
As part of our team, you will be helping us create an entirely new network for the world's money. For everyone, everywhere.
Your responsibilities will include:
- Scope Rationalization & Optimization: Analyze and challenge existing IT SOX scope across applications and infrastructure. Identify duplicate, redundant, or over-engineered ITGCs/ITACs and propose enhancements.
- New System Onboarding: Establish RACMs (Risk and Control Matrices) and identify necessary ITGCs and ITACs for newly in-scope SOX applications and platforms.
- Dependency & System Mapping: Document and maintain end-to-end dependency maps (upstream/downstream data flows, infrastructure ties, and automated interfaces) for management review.
- Controls Testing: Where needed, support control testing (Design & Operating Effectiveness) across our cloud infrastructure and SaaS landscape.
- Stakeholder Management: Partner with key stakeholders across Finance, Risk, Security, Platform to effectively communicate SOX 404 requirements and expectations.
To qualify for this role, you should:
- Have 3+ years of experience in Technology Risk or IT Audit, with a dedicated focus on SOX.
- Possess deep knowledge of SOX 404 requirements, COSO framework, and IT control frameworks (NIST, ISO27001).
- Have demonstrable experience with first-time SOX audits in cloud-native environments.
- Understand how compliance frameworks map to dynamic infrastructures.
- Be familiar with cloud-native mindset, including Change Management in a CI/CD pipeline and Access Management in a microservices architecture.
- Have experience with AWS, Terraform, GitHub, Jira, Okta, and SailPoint (preferred).
- Know what a good RACM looks like and can analyze system architecture diagrams or control frameworks to spot gaps or duplicates.
- Be able to translate technical architecture details into audit-ready documentation and explain compliance requirements clearly to engineers.