What you'll do...
Position: Senior Manager, Global IT SOX
Job Location: 811 Excellence Dr, Bentonville, AR 72716
Duties: Provide oversight of the effectiveness of the control environment for IT systems that support SOX, including consideration of IT general controls (ITGCs) and related IT dependencies such as automated controls, key reports, calculations, and interfaces, to ensure alignment with PCAOB standards and internal compliance requirements; engage with cross-functional stakeholders across Risk & Compliance, Global Technology, Product and Finance to monitor IT control effectiveness and communicate observations to leadership; focus on continuous learning in IT risk and compliance topics, including PCAOB requirements, cybersecurity, automation, and cloud platforms; advise stakeholders on control expectations and SOX compliance obligations; participate in the scoping and execution of the annual SOX program plan utilizing a risk-based approach to verify the appropriate key SOX systems, IT controls, and IT dependencies are identified. Drive oversight of the IT control environment by reviewing management's documentation, participating in walkthroughs, and assessing control design against regulatory requirements; evaluate control deficiencies by identifying root causes and compensating controls; report on the adequacy of remediation activities to senior leadership; align remediation priorities with business and IT stakeholders to ensure timely closure of issues; provide recommendations to strengthen ITGCs processes and controls across access, change management, program development, and computer operations; support the coordination of external audit requests and facilitate alignment between management and auditors. Represent the IT SOX function in discussions with technology and audit stakeholders; review transformation initiatives such as system implementations, upgrades, or process redesigns to assess potential SOX impacts; advise business and IT partners on the design of effective IT dependencies (e.g., automated controls, calculations, key reports, interfaces) and reporting dependencies; ensure that IT control considerations are incorporated into new and existing processes; communicate results and control effectiveness to Finance leadership, Internal Audit, Global Technology stakeholders, and senior management; participate in Global SOX strategic planning activities to develop short- and long-term departmental initiatives that enhance scalability of the SOX organization and support future growth, including the implementation of technology solutions that increase efficiency and sustainability within the control environment. Support continuous improvement of the IT SOX program by monitoring industry best practices and recommending enhancements that improve efficiency and sustainability; collaborate with peers to implement technology solutions that modernize the IT control framework; participate in departmental planning initiatives to strengthen the SOX compliance environment; contribute to professional development by maintaining current knowledge of SOX requirements, ITGC frameworks, and evolving PCAOB expectations; share expertise with team members and stakeholders to promote consistent application of SOX methodologies.
Minimum education and experience required: Bachelor's degree or the equivalent in Business, Accounting, Engineering, Information Technology, or related field plus 6 years of post-bachelor's progressively responsible experience in information technology, audit, or information security or related experience; OR Master's degree or the equivalent in Business, Accounting, Engineering, Information Technology, or related field plus 4 years of experience in information technology, audit, or information security or related experience.
Skills required: Must have experience with: Applying PCAOB and AICPA audit methodologies to assess control environment and implement internal controls for compliance with standards; Using risk management methodologies, frameworks, and principles such as the Sarbanes-Oxley Act (SOX), COSO framework, and SSAE 18 standards to design and implement internal controls to mitigate risks of material misstatement in financial reporting; Designing and implementing Information Technology General Controls, automated controls, reports, interfaces, and calculations to support the annual Public Company Accounting Oversight Board (PCAOB) integrated audit; Executing annual SOX program utilizing a risk-based approach to verify systems and IT controls and identify IT dependencies; Monitoring the effectiveness of IT control environments supporting SOX compliance, ensuring that management identifies IT risks and implements adequate controls; Evaluating control deficiencies, including identifying root causes and compensating controls; Advising business and IT teams during transformational initiatives, such as system implementations and process redesigns, by identifying risks and designing effective automated controls; Designing and testing interfaces built using various technologies, including batch jobs, API, MQ, and Kafka; Designing and testing automated application controls for ERP systems (SAP and Oracle); Validating the completeness and accuracy of reports developed in various programming languages (SQL, Java, and Python) using methodologies such as code annotation and accept-reject testing; Designing and implementing Information Technology General Controls across applications (both on-prem and cloud-based), operating systems (Windows, Linux/Unix, Mainframe and AS/400), databases (Oracle, DB2, Cassandra and SQL) and cloud platforms (Google Cloud Platform and Azure Cloud). Employer will accept any amount of experience with the required skills.
Rate of pay: $121,160.00 - 180,000.00/year