Manager SOX

Position Overview:

We are seeking an experienced ITGC Controls Manager to join our dynamic IT Audit team. In this role, you will be responsible for managing and overseeing the execution of IT General Controls (ITGC) audits for our clients. You will play a critical role in assessing and testing the design and operational effectiveness of IT controls, supporting clients with regulatory compliance, and providing recommendations for improving control environments. This is an excellent opportunity for someone with a strong understanding of ITGC frameworks and audit practices, along with leadership and communication skills.

Key Responsibilities:

• Manage and lead the planning, execution, and delivery of ITGC audits across a variety of clients, ensuring compliance with regulatory requirements (SOX, COSO, COBIT, etc.) and internal audit standards.
• Conduct risk assessments and evaluate the effectiveness of IT controls over financial reporting, security, and systems reliability.
• Perform walkthroughs, design assessments, and testing of ITGCs related to access controls, change management, IT operations, and data integrity. Identify control gaps and recommend improvements.
• Provide advice on IT risk management, control frameworks, and industry best practices.
• Supervise and mentor junior staff on ITGC engagements. Provide guidance on audit methodologies, control testing techniques, and reporting. Foster a collaborative and high-performance team environment.
• Develop and review audit documentation, ensuring that it is complete, accurate, and aligned with firm standards. Prepare and present findings to senior management and clients, including remediation plans for identified control weaknesses.
• Stay updated on emerging IT risks, audit methodologies, and regulatory changes. Contribute to the development of audit tools, templates, and best practices within the firms IT audit function.
• Collaborate with other audit teams, such as financial audit teams, to assess the overall control environment and ensure seamless integration of ITGC testing with broader audit processes.

Qualifications:

• Education: Bachelors degree in Information Technology, Computer Science, Accounting, or related field.
• Professional certifications such as CISA, CISSP or CISM is mandatory

Experience:

• At least 6-7+ years of experience in IT audit or internal controls, with a focus on ITGCs and related areas
• Previous experience in managing IT audit engagements, ideally in a professional services environment.
• Strong knowledge of audit methodologies, IT frameworks (COSO, COBIT, ITIL), and industry standards for risk management and controls.
• Experience with ITGC testing for regulatory compliance frameworks such as SOX, GDPR, ISO, PCI-DSS, etc.
• Familiarity with ERP systems (SAP, Oracle, etc.) and their control environments
• Knowledge of cybersecurity principles and IT infrastructure (network security, cloud computing, etc.) is a plus

Soft Skills:

• Excellent communication and interpersonal skills, with the ability to explain complex technical issues to non-technical stakeholders.
• Strong analytical and problem-solving abilities.
• Ability to mentor and develop junior staff.
• Strong project management skills, including the ability to manage multiple priorities and deadlines.