Sr. Manager, IT SOX Compliance

Overview

This role is responsible for managing and executing the organization’s IT SOX Compliance program in alignment with Sarbanes-Oxley (SOX) requirements across the business. The Senior Manager serves as a trusted compliance partner to key stakeholders, designing, implementing, and monitoring internal controls over financial reporting (ICFR) from an IT perspective to ensure compliance with regulatory and audit standards.

Responsibilities

• Manage and assist with the development and maintenance of IT SOX documentation (including process narratives, flowcharts, and risk control matrices) across all in-scope SOX systems, applications, and infrastructure, and support non in-scope areas for IT SOX readiness.
• Ensure ITGC control activities are designed effectively and continuously monitor for operating effectiveness.
• Coach ITGC control owners on necessary changes when controls are not operating effectively or when the control environment changes due to people, process, or technology.
• Assist with the creation of management responses and due dates to support effective and timely remediation.
• Participate in audit, certification, and compliance events, including sample and evidence gathering and delivery; act as a liaison between auditors and ITGC control owners to support understanding and timely deliverables.
• Support administration of successful completion of UARs (User Access Reviews) and SOC Reviews (Service Organization Controls reviews for SaaS vendors).
• Track IT SOX program KPIs.
• Work with IT and other functional teams to ensure controls and compliance requirements for all ITGC objectives are clearly defined and implemented.
• Continuously evaluate the overall IT control environment to identify and mitigate risk.
• Manage and/or execute other assigned tasks supporting the IT Compliance Program, as well as IT compliance enhancements and projects.

Requirements

• Minimum of 10 years of experience in IT audit and/or IT compliance, including IT SOX compliance, with thorough understanding of all ITGC control objectives.
• Minimum of 3–5 years of experience in an IT SOX manager capacity.
• Strong understanding of SOX Section 404, COSO framework, and IT control frameworks such as COBIT or NIST.
• Ability to manage cross-functional teams and communicate effectively with technical and non-technical stakeholders.
• Experience with GRC platforms and audit tools (e.g., Oracle GRC, AuditBoard).
• Experience with cloud environments and SaaS solution SOC evaluations (e.g., AWS, GCP, Azure).
• Experience with ERP systems (e.g., Oracle, SAP, Workday).
• Experience with IT tools and infrastructure (e.g., password vaults, ticketing systems, Single Sign-On, Active Directory, data warehouses, etc.).
• Ability to advise, collaborate, and work effectively in a team environment.
• Ability to successfully effect change management.
• Highly organized, efficient, able to meet deadlines, and detail-oriented.
• Demonstrates ownership and strong execution.

Education

• Bachelor’s degree in Information Systems, Accounting, Finance, or related field.

Certifications / Training

At least one required from the following:

• Certified Information System Auditor (CISA)
• Certified Internal Auditor (CIA)
• Certified Public Accountant (CPA)
• ITIL, CRISC, or similar risk-focused credentials

Compensation & Benefits

• Compensation range: $103,200.00 – $184,300.00 (annual)
• Base pay may vary depending on location and job-related knowledge, skills, and experience.
• Supplemental pay types may include commissions or bonus incentives, depending on the role.
• Health and wellness benefits including paid time off and holiday pay.
• myFlexPay program provides early access to 50% of earned wages at any time.

Location

• Texas

Equal Opportunity Statement

Applicants are considered without regard to race, ethnicity, national origin, sex, sexual orientation, gender identity or expression, age, disability, religion, military or veteran status, or any other characteristics protected by law.