IT SOX Compliance Senior Manager

General Summary

The IT SOX Compliance Senior Manager plays a critical role in ensuring that the Company’s IT environment maintains strong internal controls. This role is responsible for strategic leadership and oversight of the IT SOX compliance program as well as partnering with cross-functional teams to mitigate risks. This position requires working onsite in Alameda, California 80% of the time.

Specific Duties And Responsibilities

• Oversee IT risk assessment and scoping process to ensure alignment with financial reporting risks.
• Review control documentation and collaborate with control owners to ensure execution of processes and documentation are adequate.
• Partner with internal audit, external audit, and control owners to coordinate ITGC and ITAC control testing and timely resolution of control related matters.
• Support new systems implementations and technology changes to ensure SOX requirements are incorporated.
• Provide training and guidance to IT control owners on SOX expectations, documentation standards, and audit readiness.
• Identify opportunities to improve the sox program through automation, metrics, tools, and process improvements.
• Adhere to the Company’s Quality Management System (QMS) as well as domestic and global quality system regulations, standards, and procedures.
• Understand relevant security, privacy, and compliance principles and adhere to the regulations, standards, and procedures that are applicable to the Company.
• Ensure other members of the department follow the QMS, regulations, standards, and procedures.
• Perform other work-related duties as assigned.

Position Qualifications

• Minimum education and experience: Bachelor’s degree in accounting or information systems, with 8+ years' experience in IT SOX compliance, Information Security or IT Risk Management, or an equivalent combination of education and experience.
• Preferred Qualifications: CISA, CIA, or CPA certification is strongly preferred. Deep knowledge of SOX 404, ITGCs, ITACs, and COSO-based internal control frameworks. Expertise in SAP environments, including knowledge of SAP Security and Basis. Experience implementing or managing GRC platforms. Technical understanding of IT operations including cloud security architectures, DevOps practices, and complex logical access management. Strong oral, written and interpersonal communication skills. High degree of accuracy, attention to detail and strong problem-solving skills.