IT Security, SOX Specialist

Role Overview

• Lead and oversee the IT General Controls (ITGC) program to ensure SOX compliance across all systems, including control testing, deficiency evaluation, and remediation tracking.
• Coordinate and execute on ITGC risk assessments, control documentation, walkthrough, and test activities across access management, change management, and IT operations.
• Evaluate control design and operating effectiveness; identify deficiencies, assess risk impact, and partner with technology stakeholders on remediation planning.
• Track remediation progress, validate corrective actions, and escalate unresolved risks in accordance with governance expectations.
• Serve as the primary liaison with Internal Audit and external auditors, supporting SOX and other external audit requests and ensuring timely, audit-ready deliverables.
• Prepare executive reports on control performance, deficiencies, and overall compliance status, while driving continuous improvement and control maturity.
• Coordinate with IT stakeholders to obtain evidence, clarify control executions and support remediation activities.
• Support the CISO in implementing internal security policies and providing required support to monitor, remediate, and improve the policies and procedures.
• Manage security monitoring, incident response coordination, vulnerability management, and access governance activities.
• Ensure appropriate security controls are integrated into system development lifecycle (SDLC), cloud deployments, and infrastructure operations.
• Develop metrics, dashboards, and executive reporting related to security posture and compliance status.
• Collaborate cross-functionally with Infrastructure, Application Development, and Shared Services teams.
• Promote security awareness and compliance culture across the organization.

Requirements

• Bachelor’s degree in information security, Computer Science, Information Technology, or related field.
• 5+ years of experience in information security, IT audit, compliance, or risk management.
• 3+ years of experience managing SOX ITGC compliance programs.
• Strong understanding of: SOX ITGC controls, Access management and identity governance, Change management processes, IT operations controls, Risk management frameworks.
• Experience working with internal and external auditors.
• Experience engineering security solutions in both on-prem and cloud based environments.
• Strong project management, organizational and analytical skills.
• Excellent communication and stakeholder management abilities.

Tech Stack

• Cloud
• SDLC

Benefits

• Great healthcare coverage including Medical, Vision, and Dental.
• 401k with 4% company match. Immediately 100% vested.
• Life, disability and supplemental insurance.
• Growth and development opportunities.
• Wellness Benefits including an Employee Assistance Program.
• Work/Life Balance with generous time off policy including PTO and paid holidays.
• Dependent Daycare flexible spending account.
• Paid parental leave.
• Commuter account.
• A sabbatical every 7 years.
• Summer Fridays (Leave at 2:00PM all Fridays from Memorial Day to Labor Day).