Senior SOX Manager

Why this role is on the menu

We are seeking a Senior SOX Manager to lead enterprise-wide programs focused on SOX compliance, IT controls, and controls transformation across modern technology environments.

This role sits at the intersection of technical program management, digital risk, and engineering, requiring the ability to translate complex system architectures into scalable, audit-ready control frameworks. The Senior SOX Manager will own program strategy and execution, driving alignment across Engineering, Finance, Data, and Audit stakeholders to deliver automated, efficient, and sustainable control environments.

What you'll cook up in your first year

Program Strategy & Execution

• Lead end-to-end SOX programs, including planning, execution, and delivery across ITGCs, ITACs, and key business process controls
• Drive risk assessments, control scoping, testing, deficiency evaluation, and remediation
• Define program roadmaps, milestones, and success metrics, ensuring alignment with compliance and audit requirements
• Coordinate with Internal Audit and external auditors to support audit readiness and reliance

Technical Program Leadership

• Lead complex, cross-functional programs spanning multiple systems, teams, and business domains
• Own program execution end-to-end, including dependency management, risk mitigation, and deficiency tracking
• Operate as the single-threaded owner for program outcomes across technology, engineering, data and finance stakeholders
• Translate ambiguous technical and regulatory requirements into structured execution plans

Technology Controls & Architecture Alignment

• Drive implementation of controls across modern technology environments, including:
• Cloud native architectures
• Cloud platforms (e.g., AWS, Azure, GCP)
• Distributed systems and microservices architectures
• API-driven and event-based systems
• Address risks related to:
• Dynamic infrastructure and environment provisioning
• Configuration management and system inconsistencies
• Partner with engineering teams to embed controls within system design and architecture decisions

SDLC & Engineering Controls Integration

• Embed controls across the software development lifecycle (SDLC), including:
• Code repositories and access controls
• CI/CD pipelines and deployment governance