IT SOX Analyst II

Box (NYSE:BOX) is the leader in Intelligent Content Management. Our platform enables organizations to fuel collaboration, manage the entire content lifecycle, secure critical content, and transform business workflows with enterprise AI. We help companies thrive in the new AI-first era of business. Founded in 2005, Box simplifies work for leading global organizations, including JLL, Morgan Stanley, and Nationwide. Box is headquartered in Redwood City, CA, with offices across the United States, Europe, and Asia.

By joining Box, you will have the unique opportunity to continue driving our platform forward. Content powers how we work. It’s the billions of files and information flowing across teams, departments, and key business processes every single day: contracts, invoices, employee records, financials, product specs, marketing assets, and more. Our mission is to bring intelligence to the world of content management and empower our customers to completely transform workflows across their organizations.

With the combination of AI and enterprise content, the opportunity has never been greater to transform how the world works together and at Box you will be on the front lines of this massive shift.

Collaborate with enterprise systems teams to gather necessary documentation and evidence for ITGC and Business Process Controls.

Facilitate the timely submission of evidence required for SOX compliance testing, ensuring all deadlines are met.

Support SOX testing and assist in the identification of control deficiencies or areas for improvement.

Act as the point of contact between internal teams (IT, Finance, Internal Audit) to ensure smooth evidence gathering and submission.

DeliverSOX training to system administrators and other relevant stakeholders to ensure they understand their role in compliance activities.

Maintain a readiness culture within the team, ensuring they are always prepared to support the SOX audit process and respond to audit requests.

Keep all administrators and relevant teams informed on updates to SOX controls, policies, and procedures.

Prepare and maintain documentation of ITGC and Business Process Controls, including detailed process flows, control narratives, and the evidence required for each control.

Ensure all processes, controls, and evidence requirements are clearly documented for compliance audits.

Maintain a repository of process and control documentation for easy access and reference by internal stakeholders and auditors.

Identify opportunities to improve and streamline evidence collection and reporting processes to improve efficiency and reduce manual efforts.

Collaborate with IT and enterprise systems teams to implement automation solutions that ensure compliance and enhance data accuracy.

Continuously assess and optimize the effectiveness of controls and evidence management processes.

Coordinate with external auditors during the SOX audit process, providing necessary documentation and explanations as required. Ensure that control deficiencies identified. during audits are properly addressed and tracked for remediation. Prepare reports summarizing SOX audit progress, findings, and remediation efforts for management.

Recommend and implement best practices to enhance compliance, internal controls, and operational efficiency.

Collaborate with cross-functional teams to ensure that new systems, applications, and processes are in compliance with SOX requirements.

We are an AI-first company. This means you approach your work with a growth mindset and find ways to leverage AI to help make faster, smarter decisions that will 10X your impact at Box.

3+ years of experience in SOX compliance, internal audit, Process improvement, quality management or related fields with a focus on ITGC and Business Process Controls.

Strong understanding of IT systems, access management, and change management processes.

Experience identifying opportunities to improve processes or evidence collection workflows.

Strong communication skills with the ability to explain technical concepts to non-technical stakeholders.

Experience providing training to cross-functional teams on compliance or process…