Sr. Manager, IT SOX Compliance

Overview

This senior manager position is responsible for effectively managing and executing the organization’s IT SOX Compliance program in alignment with Sarbanes-Oxley (SOX) requirements across the enterprise. The role partners with key stakeholders to design, implement, and monitor internal controls over financial reporting (ICFR) from an IT perspective to ensure compliance with regulatory and audit standards. Expertise in IT General Controls (ITGCs) and IT best practices is required, along with the ability to communicate and implement control expectations throughout the organization.

Responsibilities

• Manage and assist with development and maintenance of IT SOX documentation (including process narratives, flowcharts, risk control matrices, and related materials) across all in-scope SOX systems, applications, and infrastructure, and for other non in-scope areas as preparation for IT SOX compliance.
• Ensure ITGC control activities are designed effectively and continuously monitor for operating effectiveness.
• Coach ITGC control owners when controls are deemed not operating effectively or when the control environment changes due to people, process, or technology changes.
• Assist in creating management responses and due dates for timely remediation solutions.
• Participate in audit, certification, and compliance events, including sample and evidence gathering and delivery.
• Serve as a liaison between auditors and ITGC control owners to improve understanding and ensure timely deliverables.
• Support administration of UARs (User Access Reviews) and SOC reviews (Service Organization Controls reviews for SaaS vendors).
• Track IT SOX program KPIs.
• Partner with IT and other functional teams to ensure controls and compliance requirements for all ITGC objectives are clearly defined and implemented.
• Continuously evaluate the IT control environment to identify and mitigate risk.
• Manage and/or execute other assigned tasks for the IT Compliance Program, including IT compliance enhancements and projects.

What You’ll Bring

• Minimum of 10 years of experience in IT audit, IT compliance, and/or IT SOX compliance, with a thorough understanding of ITGC control objectives.
• Minimum of 3–5 years in an IT SOX manager capacity.
• Strong understanding of SOX Section 404, the COSO framework, and IT control frameworks such as COBIT or NIST.
• Ability to manage cross-functional teams and communicate effectively with technical and non-technical stakeholders.
• Experience with GRC platforms and audit tools (e.g., Oracle GRC, AuditBoard).
• Experience with cloud environments and SaaS solution SOC evaluations (e.g., AWS, GCP, Azure).
• Experience with ERP systems (e.g., Oracle, SAP, Workday).
• Experience with IT tools and infrastructure (e.g., password vaults, ticketing systems, Single Sign-On, Active Directory, data warehouses).
• Ability to advise, collaborate, and work in a team environment.
• Ability to successfully drive change management.
• Highly organized and efficient, with strong attention to detail and ability to meet deadlines.

Education

• Bachelor’s degree in Information Systems, Accounting, Finance, or a related field.

Certifications/Training (At Least One Required)

• Certified Information System Auditor (CISA)
• Certified Internal Auditor (CIA)
• Certified Public Accountant (CPA)
• ITIL, CRISC, or similar risk-focused credentials

Compensation & Benefits

• Compensation Range: $103,200.00 - $184,300.00 (Annual)
• Base pay offered may vary based on actual location, job-related knowledge, skills, and experience.
• Supplemental pay types may include commissions or bonus incentives, depending on the role.
• Health and wellness benefits, including paid time off and holiday pay.
• Access to early wages: eligible employees may access up to 50% of earned wages at any time through an earned wage access program.

Location

• Texas