> Markdown version of [/jobs/ext/2610888-it-sox-consultant](https://www.wearedevelopers.com/jobs/ext/2610888-it-sox-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT SOX Consultant - **Company:** The Smart - **Location:** United States (Remote available) - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Software as a Service, Cloud Computing, Information Systems, Information Technology Audit, User Provisioning Software, Enterprise Software Applications, IT General Controls (ITGC) - **Published:** August 11, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=681391379a39b9d0 ## About the Role * 2 to 5 years of relevant IT SOX, IT Audit, Technology Risk, or IT Controls experience. * Hands-on experience performing ITGC testing across logical access, change management, and computer operations. * Understanding of IT control design and operating effectiveness. * Proven experience preparing and maintaining SOX/audit workpapers and evidence trails. * Ability to independently request, review, and evaluate supporting control evidence. * Experience participating in control walkthroughs and stakeholder discussions. * Strong organization and task-prioritization skills to manage multiple controls and deadlines concurrently. * Excellent written and verbal communication skills to work effectively in a remote environment. Preferred Qualifications * Experience collaborating directly with external audit teams. * Experience testing automated or IT-dependent application controls. * Familiarity with GRC / audit management platforms. * Exposure to ERP, cloud, SaaS, or enterprise technology environments. * Certified Information Systems Auditor (CISA) certification or progress toward certification. Core Skills & Attributes * High level of attention to detail and workpaper quality. * Strong analytical and problem-solving skills to reach supported control conclusions. * Excellent interpersonal skills to interact professionally with IT stakeholders and external auditors. * Self-motivated mindset with the ability to operate independently with minimal direction. ## Description The IT SOX Consultant supports an established IT SOX Compliance team by executing control testing, evidence collection, workpaper documentation, walkthroughs, and day-to-day SOX compliance activities. Operating at an IT SOX Senior level, this hands-on role requires a solid understanding of IT control design, independent execution of assigned testing, clear communication with control owners, and the maintenance of audit-ready workpapers across multiple deadlines. Key Responsibilities ITGC Testing & Evidence Evaluation * Execute testing of IT General Controls (ITGCs) across assigned applications, systems, and technology processes. * Perform testing across logical access, user provisioning/termination, privileged access, periodic access reviews, change management, and computer operations. * Request, collect, and evaluate supporting evidence from control owners for completeness, accuracy, and relevance. * Document testing procedures, evidence reviewed, exceptions identified, and testing conclusions. Workpaper Documentation & Walkthroughs * Prepare detailed, organized, and audit-ready testing workpapers and evidence trails supporting testing conclusions. * Participate in and lead walkthroughs and control discussions with IT stakeholders and control owners. * Identify potential control gaps or exceptions, escalate findings appropriately, and assist with remediation and retesting. Program Coordination & Stakeholder Management * Maintain testing trackers and provide timely status updates to SOX management, Internal Audit, and external auditors. * Manage multiple assigned controls, evidence requests, and testing deliverables concurrently while meeting deadlines. * Assist with other technology risk, compliance, and IT SOX activities as needed. ## Related Videos - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) - [Beyond the Hype: Building Trustworthy and Reliable LLM Applications with Guardrails](https://www.wearedevelopers.com/videos/1594-beyond-the-hype-building-trustworthy-and-reliable-llm-applications-with-guardrails) - [Microservices? Monoliths? An Annoying Discussion!](https://www.wearedevelopers.com/videos/970-microservices-monoliths-an-annoying-discussion) - [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Fleet Management - Reinvented](https://www.wearedevelopers.com/videos/473-fleet-management-reinvented) ## Related Articles - [Should senior developers refuse interview coding challenges?](https://www.wearedevelopers.com/magazine/29-should-senior-developers-refuse-interview-coding-challenges) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know) - [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Now is the time for industrialized software development](https://www.wearedevelopers.com/magazine/601-now-is-the-time-for-industrialized-software-development)