Global Lead – IT SOX

Key Responsibilities

• Lead SOX compliance activities for IT General Controls (ITGCs), including planning, scoping, walkthroughs, testing, and reporting across global systems and applications.
• Perform IT risk and control assessments covering access management, change management, IT operations, cybersecurity, and system implementations, ensuring alignment with SOX, COSO, and COBIT frameworks.
• Manage documentation of IT processes, ITGC/ITAC risk and control matrices, and system flowcharts to ensure control design adequacy and compliance.
• Track, monitor, and report on IT control deficiencies, remediation plans, and management action plans to ensure timely closure.
• Partner with IT, business to provide advisory support on embedding IT controls into new initiatives, system rollouts, and emerging technologies.
• Support the Enterprise Risk Management (ERM) program by assessing IT-related risks, contributing to risk registers, and providing inputs for dashboards and committee reporting.
• Prepare and deliver dashboards, presentations, and management updates on ITGC testing, ERM (IT-related) risks, and control environment status for senior leadership and governance bodies.
• Drive continuous improvement by identifying opportunities for standardization, automation, and enhanced monitoring of IT controls globally.

Qualifications & Experience

• Master’s degree in Information Technology, Computer Science, Information Systems, or related field.
• 3-5 years of relevant experience in IT audit, ITGC testing, SOX compliance, internal controls, or IT risk management.
• Professional certification preferred: CISA (primary); additional certifications such as CISM, CISSP, CPA, or equivalent considered an advantage.
• Strong knowledge of IT processes, ERP systems, databases, operating systems, cloud platforms, and experience applying COSO, COBIT, and ISO 27001 frameworks.

Key Skills and Competencies

• Good understanding of IT processes, ERP systems, databases, operating systems, and cloud platforms, with experience applying COSO, COBIT, NIST, and ISO27001 frameworks.
• Experience managing global ITGC and IT audit programs and delivering results on time.
• Strong communication and stakeholder management skills, able to work with IT, Finance, and Risk teams.
• Proactive and solution-oriented, with ability to take ownership and improve IT controls and risk management.