IT SOX Consultant

The Smart
United States
24 days ago
Apply on www.indeed.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
2 years minimum
Working hours
Regular working hours
Job source

Tech stack

Software as a Service Cloud Computing Information Systems Information Technology Audit User Provisioning Software Enterprise Software Applications IT General Controls (ITGC)

Job description

The IT SOX Consultant supports an established IT SOX Compliance team by executing control testing, evidence collection, workpaper documentation, walkthroughs, and day-to-day SOX compliance activities. Operating at an IT SOX Senior level, this hands-on role requires a solid understanding of IT control design, independent execution of assigned testing, clear communication with control owners, and the maintenance of audit-ready workpapers across multiple deadlines. Key Responsibilities ITGC Testing & Evidence Evaluation

  • Execute testing of IT General Controls (ITGCs) across assigned applications, systems, and technology processes.
  • Perform testing across logical access, user provisioning/termination, privileged access, periodic access reviews, change management, and computer operations.
  • Request, collect, and evaluate supporting evidence from control owners for completeness, accuracy, and relevance.
  • Document testing procedures, evidence reviewed, exceptions identified, and testing conclusions.

Workpaper Documentation & Walkthroughs

  • Prepare detailed, organized, and audit-ready testing workpapers and evidence trails supporting testing conclusions.
  • Participate in and lead walkthroughs and control discussions with IT stakeholders and control owners.
  • Identify potential control gaps or exceptions, escalate findings appropriately, and assist with remediation and retesting.

Program Coordination & Stakeholder Management

  • Maintain testing trackers and provide timely status updates to SOX management, Internal Audit, and external auditors.
  • Manage multiple assigned controls, evidence requests, and testing deliverables concurrently while meeting deadlines.
  • Assist with other technology risk, compliance, and IT SOX activities as needed.

Requirements

  • 2 to 5 years of relevant IT SOX, IT Audit, Technology Risk, or IT Controls experience.
  • Hands-on experience performing ITGC testing across logical access, change management, and computer operations.
  • Understanding of IT control design and operating effectiveness.
  • Proven experience preparing and maintaining SOX/audit workpapers and evidence trails.
  • Ability to independently request, review, and evaluate supporting control evidence.
  • Experience participating in control walkthroughs and stakeholder discussions.
  • Strong organization and task-prioritization skills to manage multiple controls and deadlines concurrently.
  • Excellent written and verbal communication skills to work effectively in a remote environment.

Preferred Qualifications

  • Experience collaborating directly with external audit teams.
  • Experience testing automated or IT-dependent application controls.
  • Familiarity with GRC / audit management platforms.
  • Exposure to ERP, cloud, SaaS, or enterprise technology environments.
  • Certified Information Systems Auditor (CISA) certification or progress toward certification.

Core Skills & Attributes

  • High level of attention to detail and workpaper quality.
  • Strong analytical and problem-solving skills to reach supported control conclusions.
  • Excellent interpersonal skills to interact professionally with IT stakeholders and external auditors.
  • Self-motivated mindset with the ability to operate independently with minimal direction.

Benefits & conditions

  • Competitive salary

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.indeed.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

59 sec

Proving regulatory compliance to auditors and chief officers

Mike Bursell Mike Bursell · World Congress 2026 Europe

2:27 min

Introduction to WebAssembly in a cloud computing context

Edo Edo · World Congress 2024

2:24 min

Managing environmental components via Terraform core architecture

Talia Nassi · LIVE

3:24 min

Evaluating remote software roles and compensation structures

Nacho Iacovino · World Congress 2021

2:51 min

Alibaba Cloud developer resources and cloud computing training

Cheng Zhang · LIVE

2:28 min

Preventing sensitive information disclosure in RAG systems

Deepu Deepu · World Congress 2025

Videos

See all

Related articles

See all