IT SOX Manager

Vanderhouwen & Associates, Inc.
Redwood City, CA, United States
14 days ago
Apply on www.vanderhouwen.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Part-time (≤ 32 hours)
Experience level
Expert
Experience required
5 years minimum
Working hours
Regular working hours

Tech stack

Software as a Service Control Objectives for Information and Related Technology (COBIT) Information Systems Human Resources Information System (HRIS) Information Technology Audit Netsuite Salesforce.Com Enterprise Software Applications IT General Controls (ITGC) HR Software Information Technology Workday

Job description

Our client is seeking an experienced IT SOX Manager to support the execution and oversight of its IT SOX compliance program. The ideal candidate brings strong hands-on IT controls experience, operates effectively with minimal oversight, and can quickly partner with internal team members and stakeholders to evaluate controls, identify risk, and maintain a strong compliance environment.

This role is fully remote working 32 hours per week.

IT SOX Manager Responsibilities

  • Lead and execute testing and review of IT General Controls (ITGCs) and IT Application Controls (ITACs) across key in-scope systems, including ERP, CRM, HRIS, and other financial applications.
  • Perform control walkthroughs, design and operating effectiveness testing, and reviews of key reports and third-party SOC 1 reports.
  • Identify control deficiencies and technology risks, determine root causes, recommend remediation strategies, and monitor corrective actions through completion and retesting.
  • Maintain clear, thorough workpapers documenting testing procedures, evidence reviewed, results, and conclusions in accordance with SOX requirements.
  • Partner closely with IT SOX team members, control owners, business stakeholders, external auditors, and service providers to coordinate compliance activities and address issues.
  • Support IT SOX scoping, risk assessments, control rationalization, and opportunities to strengthen or streamline the control environment.
  • Manage multiple priorities and testing deadlines independently while proactively communicating risks, findings, and status updates to appropriate stakeholders.

Requirements

  • 5+ years of IT SOX, IT audit, or technology risk experience within a public company, public accounting firm, consulting environment, or similar setting.
  • Strong hands-on experience evaluating and testing ITGCs and ITACs, including controls associated with access, change management, system operations, key reports, and third-party service providers.
  • Experience working with complex enterprise applications such as NetSuite, Salesforce, Workday, or comparable ERP, CRM, and HRIS platforms.
  • Strong understanding of SOX compliance and internal control frameworks, with familiarity with COSO, COBIT, NIST, or related standards.
  • Demonstrated ability to work independently, quickly understand existing processes and systems, and execute effectively with minimal training or oversight.
  • Bachelor’s degree in Information Systems, Computer Science, Accounting, Finance, or a related discipline, or equivalent relevant experience.
  • Strong communication, organization, analytical, and documentation skills with the ability to collaborate effectively across technical and business teams.
  • SaaS or technology industry experience is strongly preferred; Big 4 or management consulting experience and certifications such as CISA, CIA, or CPA are also preferred.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.vanderhouwen.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

3:24 min

Evaluating remote software roles and compensation structures

Nacho Iacovino · World Congress 2021

6:22 min

Eliminating HR bureaucracy and trusting employees

Rudi Bauer Rudi Bauer +1 · Cappuccino with HR

1:41 min

Embedding artificial intelligence directly within enterprise data grids

Vitaly Friedman Vitaly Friedman · World Congress 2026 Europe

2:47 min

Designing benefit programs with high activation and low administration

Rudi Bauer Rudi Bauer +1 · Cappuccino with HR

1:06 min

Developer experience and project variety at scale

Alexandra Petri · World Congress 2023

5:06 min

Primary reasons for capability gaps in modern recruitment systems

Rudi Bauer Rudi Bauer +1 · Cappuccino with HR

Videos

See all

Related articles

See all