Requirements:

• Deep knowledge of SOX 404 requirements, COSO framework, and IT control frameworks (NIST, ISO27001).
• 3+ years of experience in Technology Risk or IT Audit, with a dedicated focus on SOX.
• Demonstrable experience with first-time SOX audits in cloud-native environments.
• Understanding of Change Management in a CI/CD pipeline and Access Management in a microservices architecture.

Nice to Haves:

• Experience with AWS, Terraform, GitHub, Jira, Okta, and SailPoint.
• Driven to modernize testing methodologies using data analytics and automation.
• Ability to work well in a cross-functional environment and communicate effectively with stakeholders.

What You'll Be Doing:

• Perform control testing for Access Management, Change Management, and IT application controls.
• Partner with key stakeholders to communicate SOX 404 requirements and expectations.
• Support control owners in maturing the risk and control environment.
• Utilize data analytics and automation to assess control design and effectiveness.
• Maintain high-quality documentation in compliance with SOX 404 requirements.