Bachelor's degree in Information Systems, Accounting, Finance, or related field.
8+ years of relevant experience in IT SOX, IT audit, or risk management at a public company or Big 4/public accounting firm.
Relevant professional certification preferred (CISA, CISSP, CISM, CRISC).
Strong understanding of SOX 404, COSO, COBIT, and PCAOB standards.
Proficiency in annual and rolling SOX scoping based on risk factors and materiality.
Responsibilities
Lead the IT SOX compliance program to mitigate financial reporting risks related to technology and data.
Provide thought leadership on business initiatives and system implementations affecting SOX compliance.
Conduct and update risk assessments for systems supporting financial reporting.
Partner with IT, Finance, and Internal Audit to ensure strong control design and accountability.
Maintain SOX documentation, including risk and control matrices and process flows.
Support process owners with training and guidance on IT General Controls and SOC Reporting.
Facilitate deficiency management and remediation processes, including root cause analysis.
Benefits
Opportunity to work remotely with a distributed team.
Engagement in a leadership role with significant influence on compliance strategy.
Exposure to cross-functional collaboration with IT, Finance, and Internal Audit.
Professional development opportunities through training and certifications.
Chance to implement automation and continuous control monitoring in compliance efforts.
Full Job Description
SUMMARY
As Senior Manager of IT SOX Compliance, you will lead the enterprise-wide IT SOX compliance program, reporting to the Director of SOX Compliance - with a focus on governance, risk assessment, control design evaluation, and program oversight. Our SOX team does not perform control testing, so this role serves in an advisory capacity centered around program ownership, risk and control design oversight, coordination with control owners, facilitation of remediation, training, and partnership with Internal Audit and external auditors.
ESSENTIAL DUTIES AND RESPONSIBILITIES
Lead the company's IT SOX compliance program, ensuring that financial reporting risks tied to technology and data are appropriately mitigated.
Provide thought leadership on new business initiatives, system implementations along with system development life cycle controls (SDLC's), IT policy changes, personnel changes, assessing the impact to the SOX compliance program, and advising the business accordingly.
Conduct and update risk assessments and scoping, especially around systems supporting financial reporting, revenue recognition, etc.
Partner with cross-functional stakeholders in IT, Finance, and Internal Audit to maintain strong control design and accountability.
Maintain and oversee SOX documentation, including risk and control matrices (RCMs), process and data flows, system diagrams, etc.
Support process owners through training, reviewing, and providing guidance for their processes including, but not limited to, IT General Controls, IT Operations and SOC Reporting.
Facilitate the deficiency management and remediation process, from root cause analysis to retesting readiness.
Support the implementation of automation and continuous control monitoring as part of control enhancement efforts.
Manage review of SOC Reports and mapping to complementary user entity controls (CUEC's)
Track and communicate program status, issues, and risks to the Director of SOX Compliance, including preparation of reports for the SOX Steering Committee and Audit Committee.
Monitor emerging risks in IT compliance, including cybersecurity threats that could impact SOX controls.
Other duties may be assigned.
DESIRED FUNCTIONAL SKILLS
A team player and process-oriented focus with excellent interpersonal, analytical, and problem-solving skills.
Exhibit critical thinking skills and ability to complete tasks with appropriate level of skepticism.
Proficiency in annual and rolling SOX scoping based on risk factors and materiality.
Deep understanding of ITGCs.
Competence in identifying and assessing application controls, key reports, and interface controls.
Skilled in documenting IT processes, process and data flows, and risk and control matrices (RCMs).
Strong project management capabilities for handling timelines, milestones, and dependencies.
Familiarity with ERP systems (e.g., Oracle Cloud, NetSuite, PeopleSoft).
Ability to review SOC 1 reports and assess reliance on third-party controls.
Able to translate complex IT and control concepts into business-friendly language.
Experience with audit software like AuditBoard is a plus.
Ability to travel 15 - 20% on average annually.
Ability to work remotely with team members in multiple locations.
undefined
DESIRED EDUCATION, EXPERIENCE AND CERTIFICATIONS
Bachelor's degree in Information Systems, Accounting, Finance, or related field.
Relevant professional certification is preferred, such as Certified Information Systems Auditor (CISA), Certified information systems security professional (CISSP), Certified Information Security Manager (CISM), Certified in Risk and Information Security Controls (CRISC).
8+ years of relevant experience, including IT SOX, IT audit, or risk management at a public company or Big 4/public accounting firm.
Strong understanding of SOX 404, COSO, COBIT, and PCAOB standards.
Everybody loves pizza, which means they also love the people who are behind the scenes working to deliver it. This is complex and challenging work - but let's face it - it's also pizza! If you want a fulfilling career with a company that's always moving forward, we're the right place.
About Papa Johns International
Papa John's International, Inc. is an American pizza restaurant franchise company. The company was founded in 1984 and is headquartered in Louisville, Kentucky. Papa John's operates over 5,000 restaurants in 45 countries and territories around the world. The company's menu includes a variety of pizzas, sides, and desserts. Papa John's is known for its commitment to quality ingredients and customer service. The company has faced controversy in recent years due to the behavior of its founder and former CEO, John Schnatter. Papa John's has taken steps to distance itself from Schnatter and improve its corporate culture.
