Technology Internal Controls Supervisor

About the role

This position is responsible for managing personnel and functions surrounding Southern Company’s technology-related Sarbanes-Oxley (SOX) controls, ensuring all control objectives are achieved to support management’s SOX 404 certification.

Job Requirements

• Bachelor’s degree in Computer Science / Information Security, Information Systems, Accounting or related field required
• Certified Information Systems Auditor (CISA), Certified Risk and Information Security Controls (CRISC) certifications or related industry certifications preferred
• Minimum of seven years’ experience in financial applications support, technology risk, or compliance (financial controls, technology controls or audit) required
• Strong working knowledge of SOX/internal control concepts and evidence standards as well as application security concepts
• Able to effectively apply technology knowledge to evaluate SOX control impact and risk associated with key financial applications (KFA), key financial tools (KFTs), and segregation of duties
• Have general understanding accounting concepts and requirements to determine appropriate risk levels of applications and related tools to financial reporting
• Leadership experience preferred, including performance management and employee development
• Excellent interpersonal, analytical, and organizational skills
• Superior communication skills, both verbal and written to engage, build credibility and maintain relationships with business partners
• Able to initiate and manage multiple complex projects
• Demonstrate behaviors consistent with company culture – Safety First, Intentional Inclusion, Act with Integrity, Superior Performance
• Familiarity with Oracle products and Workiva software a plus

Major Job Responsibilities

• Provide leadership in the following areas to support the company’s SOX compliance:
• Annual SOX risk assessment, scoping and planning for IT-related controls (automated controls, general computing controls, and logical access)
• Evaluate the design and operating effectiveness of IT-related controls, including controls around key reports (information used in controls)
• Evaluate and document IT SOX control deficiencies, including severity assessment, root cause analysis, exposure analysis, and remediation plans
• Quarterly/annual control certification for IT-related controls
• Assess new applications and tools and/or changes to existing applications and tools for SOX impact
• Provide internal controls leadership for application and tool implementations
• Facilitate the annual SSAE 18 (SOC report) assessments and segregation of duties (SOD) analysis
• Build and maintain strong relationships with control owners and performers in IT and business departments, internal auditors, and external auditors to further enable common goals and efficiencies
• Identify and implement innovative solutions to achieve process efficiencies around controls testing
• Develop and coach direct reports

Qualifications

None specified in the job posting.

Skills

None specified in the job posting.

Benefits

Visit this link for a summary of the benefits offered for this position.

Pay

Details about total compensation and benefits will be provided during the hiring process.

Schedule

Full time