SOX Auditor - IT Controls Manager
You will lead independent testing of IT general and application controls across access management, change management, system operations, blockchain infrastructure, digital asset custody systems, and crypto trading platforms. You will build testing programs and workpapers, validate remediation, assess deficiencies, track findings, report results, and partner with control owners, auditors, and SOX stakeholders.
Responsibilities
- Lead independent testing of IT general controls across access management, change management, and system operations
- Evaluate the design and operating effectiveness of IT controls across applications and infrastructure
- Document testing procedures and results
- Identify new systems and process changes and assess their SOX implications
- Build and maintain testing programs, templates, and workpapers
- Use AI-enabled workflows and data analytics to improve testing coverage and efficiency
- Validate remediation of open SOX findings
- Perform root cause analysis and assess the severity and pervasiveness of control exceptions
- Assess management remediation actions before closing findings
- Track remediation progress and report status to leadership and the Audit Committee
- Coordinate remediation expectations and evidence requirements with the SOX Compliance team
- Serve as an Internal Audit point of contact for IT control owners
- Report IT SOX testing coverage, findings, and remediation status
- Coordinate testing coverage with business process testers and co-sourced resources
Requirements
- 8+ years of experience in IT audit, internal audit, external audit, or SOX compliance
- Significant experience testing IT general controls
- Experience in crypto, fintech, payments, or technology-intensive environments
- CISA and CPA certifications, or active pursuit of one certification
- Knowledge of ITGC frameworks, SOX compliance, COSO, COBIT, and PCAOB auditing standards
- Experience testing access management, change management, and system operations controls
- Understanding of systems, databases, and deployment pipelines
- Understanding of IT controls and their impact on financial reporting
- Experience working with external auditors
- Experience across multiple entities or jurisdictions
- Experience with blockchain infrastructure, digital asset custody, or on-chain transaction processing is a plus
- Experience with CI/CD pipelines, GitLab, AWS, GCP, or modern deployment practices is a plus
- Familiarity with AuditBoard, Workiva, or AI-assisted audit tools is a plus
Benefits
- Equity
- Bonus program
- Wellness allowance
- Medical insurance
- Dental insurance
- Vision insurance
- 401(k)