IT SOX Controls Specialist

About the Team

Finance is the strategic engine that drives rigorous decision making and acts as the financial stewards of Stripe's businesses. Stripe is building a world-class Controllership team, responsible for the corporate SOX program. This growing team is responsible for the global implementation and operation of Stripe's SOX program. We seek a candidate excited by the challenge of working for a hyper-growth company focused on expanding the economic infrastructure of the internet.

Responsibilities

• Own the end-to-end SOX assessment lifecycle for third-party applications in scope for financial reporting, including identification, risk tiering, and control mapping
• Lead the evaluation and review of third-party SOC 1 and SOC 2 reports (SSAE 18 / ISAE 3402), assessing complementary user entity controls (CUECs) and identifying gaps that require compensating controls at Stripe
• Design and implement controls to address risks arising from third-party systems and integrations that impact the financial reporting supply chain
• Develop and maintain SOX-ready documentation for third-party control environments, including risk and control matrices (RCMs), narratives, and process flow diagrams
• Project manage control definition and implementation for new third-party system implementations, migrations, and integrations with financial reporting impact
• Partner with IT, Procurement, and business stakeholders to embed control requirements into the vendor onboarding and periodic review process
• Review IPE (Information Produced by the Entity) sourced from third-party systems for completeness and accuracy
• Assess and track control deficiencies identified through third-party reviews, coordinating root cause analysis and corrective action plans with relevant process owners
• Support the 302 and 404 sub-certification process as it relates to third-party application risks and controls
• Monitor the third-party application landscape for emerging financial reporting risks as Stripe scales, and proactively develop control plans to address them
• Contribute to ongoing SOX program improvements, including automation and optimization of third-party control monitoring

Requirements

• Bachelor's degree; Master's degree a plus in Accounting, Information Systems, Finance, or related field
• Technical certification required (e.g., CPA, CIA, CISA, PMP)
• 10+ years of work experience in managing and/or assessing SOX programs
• Big 4 audit firm or equivalent audit experience
• Developed expertise and extensive experience with leading and performing SOX business process program design, control implementation, and monitoring of SOX program
• Hands-on experience evaluating third-party SOC reports (SOC 1 / SOC 2) and assessing CUEC coverage and gaps
• Familiarity with IT general controls and application-level controls in the context of financial reporting systems
• Strong knowledge of technical accounting, order to cash, and financial close & reporting controls
• Strong communication skills, including presenting to and influencing senior business leaders
• Demonstrated success managing concurrent workstreams/projects independently

Preferred Qualifications

• Experience in implementing internal controls in early-stage public companies is strongly preferred
• Experience with an online payments company, ecommerce, SaaS, Payments, Fintech, or Financial Services industries is desirable
• Experience working with JIRA and AuditBoard is a plus
• Familiarity with third-party risk management (TPRM) frameworks and vendor risk programs is a plus

In-office expectations

Office-assigned Stripes in most locations are currently expected to spend at least 50% of the time in a given month in their local office or with users. This expectation may vary depending on role, team, and location. For example, Stripes in Stripe Delivery Center roles in Mexico City, Mexico, Bengaluru, India, and Dublin, Ireland work 100% from the office. Some teams have greater in-office attendance requirements to appropriately support users and workflows, which the hiring manager will discuss.

Pay and Benefits

The annual US base salary range for this role is $135,000 - $202,400. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning it includes both sales commissions/sales bonuses target and annual base salary. This range may be narrowed during the interview process based on experience, qualifications, and location. Applicants outside the US may request the annual salary range for their location during the interview process.

• Additional benefits may include: equity, company bonus or sales commissions/bonuses
• 401(k) plan
• Medical, dental, and vision benefits
• Wellness stipends