Governance, Risk and Control (SOX) Specialist

About the Role

Wonder is looking for a GRC specialist with a deep understanding of security risk management and the evolving threat landscape. In this role you will develop and execute internal security risk assessments, track security maturity metrics and KPIs, and conduct control testing for IT systems supporting financial reporting. This role is key to supporting our audit readiness and compliance initiatives.

What You Bring to the Table

• 3–5 years of experience with frameworks such as ISO 27001, SOC 2, NIST, CIS Controls, HIPAA, IT audit and SOX compliance
• Hands-on experience with SOX compliance, ITGCs, and the full audit lifecycle — scoping through remediation
• Experience planning and executing information security risk assessments and security control testing
• Experience coordinating with internal or external auditors, including evidence gathering and walkthroughs
• Strong written and verbal communication skills; able to explain technical controls to nontechnical audiences
• High attention to detail and strong organizational skills with the ability to manage multiple workstreams simultaneously
• CISA, CRISC, CISSP, or equivalent certification highly preferred

Pay

New York / New Jersey Base Salary: $176,000–$183,500. Wonder uses geographic-specific salary structures, which means the salary offered may vary depending on where the job is located. The final salary offer will take into account various factors, such as the candidate's skills, education, training, credentials, and experience.

Benefits

• Competitive compensation package with equity and a 401(k)
• Choice of medical, dental, and vision plans
• Company paid short and long term disability coverage
• Paid time off including flexible time off for exempt employees, paid vacation for non-exempt employees, and paid sick leave in compliance with applicable law
• Paid parental leave
• Discounted meals and exclusive perks across the Wonder family of brands