As a SOX Security and Compliance Manager, you lead SOX initiatives and build a small team of analysts to help drive and mature the SOX roadmap.
Responsibilities
- Build and mature a program to support SOX initiatives, including developing a SOX plan and driving initiatives within.
- Build, manage, and coach a small team of security compliance analysts to execute against the SOX roadmap.
- Assist with scoping of IT systems and deliver training to owners in preparation for SOX audit.
- Lead gap assessments over IT control environment and design and track remediation efforts to completion.
- Assess SOX implications of new products, update relevant controls, and communicate requirements to product organization and other stakeholders.
- Perform impact analysis for control deficiencies identified over SOX environment and partner with owning teams to design remediation plan.
- Oversee audit evidence collection process via an automated tool.
- Provide ongoing reporting to stakeholders and leadership on above responsibilities.
- Build close relationships with stakeholder teams including Security, IT, Infrastructure, Engineering, Data, and Finance to advise on SOX requirements and ensure excellence in control ownership.
- Create and improve SOX procedural documentation, including control narratives, data flow diagrams, and process documentation.
- Work closely with internal and external auditors to educate them about a complex technology control environment.
- Oversee quality of audit initiatives, identify and analyze process gaps, provide guidance and expertise to team members.
- Develop creative solutions to prove risk mitigation and solve for complex audit problems faced by the crypto industry.
- Serve as a point of escalation for your team, identify opportunities to address systemic challenges, and equip your team to drive issue resolution.
Requirements
- Minimum of 7+ years of security/IT compliance or equivalent experience with experience leading and/or building a team of Full-Time employees.
- Strong knowledge and hands-on experience in Internal Controls over Financial Reporting, SOX 404 frameworks, and testing to support compliance.
- Prior experience working closely with auditors and/or external regulators
- Experience leading compliance initiatives from start to finish
- Experience reporting security compliance posture to senior stakeholders
- Proven understanding and audit experience of cloud technologies, AWS preferred.
- Ability to accomplish outcomes effectively and autonomously across cross-functional teams in ambiguous situations with minimal supervision.
- Strong oral and written communication skills.
- Ability to multitask, direct cross functional work, and hold others accountable to committed deadlines in a fast-paced environment.
- Ability to communicate with technical / non-technical stakeholders to align on shared outcomes.
- BA or BS in a technical field or equivalent experience.
- Prior experience at a big 4 accounting firm.
- Security certifications e.g. CISA, CISSP, CISM or other relevant certifications.
- Experience auditing in Crypto space.