IT SOX Lead

Essential Responsibilities

• Manage the execution of the Company’s compliance with Sarbanes-Oxley and the Model Audit Rule.
• Facilitate IT control owner education and training.
• Participate in the scoping exercise for determining processes in scope for testing to ensure IT systems and tools are appropriately considered.
• Analyze design of the Company’s IT general controls and IT application controls relevant to financial reporting to identify opportunities for improvement, including automation, artificial intelligence, and other forms of emerging technologies.
• Support system implementations / upgrades for any applications impacting internal controls over financial reporting.
• Work closely with the Company’s internal and external audit teams to facilitate testing and evaluation of IT general controls and IT application controls.
• Evaluate impact of information technology control deficiencies and advise process and control owners on remediation efforts.
• Participate in deficiency aggregation analysis and report on conclusions.
• Interact with all functions and departments, serving as a subject matter expert on information technology internal control over financial reporting matters.
• Support the business in evaluating IT risks and controls for third-party service organizations.
• Support the strategic goals of the department and Company.

Other Duties

Performs other duties and/or projects as assigned.

Knowledge, Skills And Abilities

• Strong understanding and working knowledge of IT internal controls over financial reporting, information security and third-party risks, controls, and common practices.
• Excellent written and verbal communication skills and the ability to communicate with associates at all levels within and outside of the organization.
• Strong organizational skills, project management skills, and the ability to handle multiple priorities.
• Strong team player with strong professional and interpersonal skills.
• Demonstrated ability to work independently and establish priorities to meet tight deadlines.
• Continuous improvement mindset.

Qualifications

• Bachelor's Degree, preferably in Computer Science, Information Systems, Accounting, or closely related field, required.
• 5+ years of information system audit, internal control, or risk management experience required.
• SOX program experience required.
• Insurance or financial services experience preferred.
• SEC experience preferred.
• “Big 4” auditing experience preferred.
• Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC), Certified Information Security Manager (CISM), Project Management Professional (PMP), Certified Internal Auditor (CIA) or other recognized IT or audit qualification preferred.