Lead Cybersecurity, SOX Governance

Responsibilities

• Participate in Governance Program Development
• Collaborate with team members to gather input and communicate project status to senior leadership across IT and Finance.
• Support the creation and refinement of governance processes that are repeatable and scalable.
• Assist in evaluating projects for potential SOX impacts by reviewing scope, objectives, and planned changes.
• Help track the completion of required deliverables throughout the project lifecycle.
• Contribute to readiness assessments for project launches, ensuring all compliance requirements are met.
• Work with team members to efficiently assess ongoing projects for changes that may affect SOX controls.
• Help identify and document the volume and risk associated with these changes.
• Support the preparation and organization of necessary documentation for external auditors, both before and after project launches.
• Ensure that all required materials are complete, accurate, and submitted on time.
• Engage with external specialists as needed to support large or complex projects with high-risk control concerns.
• Facilitate effective communication and coordination between internal teams and third-party experts.
• Identify opportunities to enhance governance processes and reduce the risk of control gaps.
• Participate in team discussions to share best practices and lessons learned.

• Bachelor’s degree (BS/BA)
• 5+ years of related experience
• Certification is required in some areas.
• Basic knowledge of SOX requirements and their impact on IT and Finance projects.
• Knowledge of SOX Controls: IT General Controls (ITGCs), IT Application Controls (ITACs) and Business/Manual Controls.
• Ability to support project tracking, documentation, and status reporting.
• Strong organizational skills to ensure deliverables are complete and accurate.
• Willingness to work closely with cross‑functional teams and external partners.
• Clear and professional communication skills, both written and verbal.
• Ability to identify risks and propose solutions to address control concerns.