Department OverviewThe Sr Manager for SOX Compliance will oversee the management and governance of SOX-related IT applications, focusing on Access Management, Change Management, Segregation of Duties (SOD), and remediation of deficiencies identified by internal and external audits as it relates to GI Mod (Global Indirect Modernization) using SAP Ariba software. This role requires a strong understanding of SOX requirements, IT controls, and audit methodologies, as well as the ability to provide strategic recommendations and implement corrective actions to ensure compliance and mitigate risks. GI Mod is a global transformation that establishes a new Indirect Sourcing and Procurement operating model and implements "One McDonald's Way" for indirect sourcing and procurement worldwide.
This role reports to the Global Tech Director of Technical Product Management and partners closely with cross-functional leaders to ensure SOX compliance on the SAP Ariba software.
Duties- Own SAP Ariba IT SOX compliance strategy and SOX-related IT change management governance, establishing standards, controls, approvals, and metrics while driving disciplined exception management and remediation.
- Lead all aspects of SAP Ariba application security in alignment with SOX compliance strategy.
- Partner with Global Security to translate cybersecurity policies into actionable control requirements, drive consistent implementation across platforms, and resolve control gaps through executive stakeholder alignment.
- Be responsible for the vulnerability management program for SOX on the SAP Ariba application, setting prioritization criteria, driving platform roadmaps, and reporting risk / remediation progress to senior leadership.
- Establish and supervised risk-based user access review governance for SOX on SAP Ariba application, ensuring timely completion, quality of evidence, and closure of findings through accountable action plans.
- Lead intake, triage, and risk assessment of IT control deficiencies identified by internal/external audit, maintaining a prioritized remediation portfolio and facilitating risk acceptance decisions when appropriate.
- Serve as the senior liaison for SOX-related audits, setting audit engagement strategy, coordinating walkthroughs and evidence, and ensuring consistent messaging and outcomes across stakeholder groups.
- Modernize and optimize the structuring of IT governance controls through standardization and automation, improving control effectiveness, auditability, and operational efficiency across the SOX compliance lifecycle.
- Build SOX and controls capability across technology teams through targeted training, playbooks, and coaching; embed control ownership into delivery practices and leadership routines.
- Deliver executive-ready reporting on audit results, trends, and remediation health; present findings and recommendations to the organization's top management and governance committees as required.
- Define and drive the multi-year IT SOX strategy roadmap (e.g., access management, change management, evidence automation), aligning priorities, funding needs, and outcomes with Senior Leadership.
- Provide oversight and advisory support on privacy and regulatory requirements (e.g., GDPR, PII), ensuring integration into IT control design, risk assessments, and audit responses for in-scope systems and processes.
Qualifications- Minimum of 8 years of experience in IT audit, SOX compliance, or a related field, with at least 2 years in a managerial role
- Strong knowledge of SOX requirements, IT general controls, and audit methodologies.
- Experience with SAP Ariba.
- Proven ability to plan, execute, and deliver complex programs with measurable business outcomes.
- Strong stakeholder management, executive communication and presentation skills.
- Demonstrated success leading cross-functional, multi-team initiatives.
- Executive-level communication skills with the ability to influence and drive decisions.
- Strong organizational skills with the ability to balance strategic thinking and attention to detail.
- Proactive, resilient, and adaptable leader with a continuous-improvement mindset.
CompensationBonus Eligible: EDIT
Long - Term Incentive: EDIT
Benefits Eligible: EDIT
Salary RangeThe expected salary range for this role is $152,678.00 - $190,845.00 per year
The above represents the expected salary range for this job requisition. Ultimately, in determining your pay, we may also consider your experience, and other job-related factors.
Benefits eligible: This position offers health and welfare benefits, including but not limited to comprehensive health insurance, which includes medical, prescription drug, mental health, dental and vision coverage, as well as, life insurance; a 401(k) plan; adoption assistance program; educational assistance program; flexible ways of working; and time off policies (including sick leave, parental leave, and vacation/PTO).
