> Markdown version of [/jobs/ext/2171865-it-sox-manager](https://www.wearedevelopers.com/jobs/ext/2171865-it-sox-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT SOX Manager - **Company:** Vanderhouwen & Associates, Inc. - **Location:** Redwood City, CA, United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Software as a Service, Control Objectives for Information and Related Technology (COBIT), Information Systems, Human Resources Information System (HRIS), Information Technology Audit, Netsuite, Salesforce.Com, Enterprise Software Applications, IT General Controls (ITGC), HR Software, Information Technology, Workday - **Published:** August 21, 2026 - **Apply:** https://www.vanderhouwen.com/job_posting/it-sox-manager-73054/ ## About the Role * 5+ years of IT SOX, IT audit, or technology risk experience within a public company, public accounting firm, consulting environment, or similar setting. * Strong hands-on experience evaluating and testing ITGCs and ITACs, including controls associated with access, change management, system operations, key reports, and third-party service providers. * Experience working with complex enterprise applications such as NetSuite, Salesforce, Workday, or comparable ERP, CRM, and HRIS platforms. * Strong understanding of SOX compliance and internal control frameworks, with familiarity with COSO, COBIT, NIST, or related standards. * Demonstrated ability to work independently, quickly understand existing processes and systems, and execute effectively with minimal training or oversight. * Bachelor's degree in Information Systems, Computer Science, Accounting, Finance, or a related discipline, or equivalent relevant experience. * Strong communication, organization, analytical, and documentation skills with the ability to collaborate effectively across technical and business teams. * SaaS or technology industry experience is strongly preferred; Big 4 or management consulting experience and certifications such as CISA, CIA, or CPA are also preferred. ## Description Our client is seeking an experienced IT SOX Manager to support the execution and oversight of its IT SOX compliance program. The ideal candidate brings strong hands-on IT controls experience, operates effectively with minimal oversight, and can quickly partner with internal team members and stakeholders to evaluate controls, identify risk, and maintain a strong compliance environment. This role is fully remote working 32 hours per week. IT SOX Manager Responsibilities * Lead and execute testing and review of IT General Controls (ITGCs) and IT Application Controls (ITACs) across key in-scope systems, including ERP, CRM, HRIS, and other financial applications. * Perform control walkthroughs, design and operating effectiveness testing, and reviews of key reports and third-party SOC 1 reports. * Identify control deficiencies and technology risks, determine root causes, recommend remediation strategies, and monitor corrective actions through completion and retesting. * Maintain clear, thorough workpapers documenting testing procedures, evidence reviewed, results, and conclusions in accordance with SOX requirements. * Partner closely with IT SOX team members, control owners, business stakeholders, external auditors, and service providers to coordinate compliance activities and address issues. * Support IT SOX scoping, risk assessments, control rationalization, and opportunities to strengthen or streamline the control environment. * Manage multiple priorities and testing deadlines independently while proactively communicating risks, findings, and status updates to appropriate stakeholders. ## Related Videos - [What if your HR software adapted to you, not the other way around?](https://www.wearedevelopers.com/videos/100259-what-if-your-hr-software-adapted-to-you-not-the-other-way-around) - [Destigmatizing the Workplace: Building Real Inclusion](https://www.wearedevelopers.com/videos/1492-destigmatizing-the-workplace-building-real-inclusion) - [Navigating the Corporate Jungle: Life as a Developer in a large Company](https://www.wearedevelopers.com/videos/621-navigating-the-corporate-jungle-life-as-a-developer-in-a-large-company) - [WeAreDevelopers LIVE - How DevRel Makes Tech More Human](https://www.wearedevelopers.com/videos/2149-wearedevelopers-live-how-devrel-makes-tech-more-human) - [Get Your Stack Together: Building the Right Recruiting Tech](https://www.wearedevelopers.com/videos/1295-get-your-stack-together-building-the-right-recruiting-tech) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) ## Related Articles - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Should senior developers refuse interview coding challenges?](https://www.wearedevelopers.com/magazine/29-should-senior-developers-refuse-interview-coding-challenges) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)