Product Manager; Compliance

• This is not a traditional audit-support role. As the Product Manager, IT SOX Compliance, you’ll translate SOX compliance requirements into structured programs, drive accountability across IT process owners, and build the systems and workflows that make compliance scalable
• You’ll work closely with the SOX team and IT process owners to ensure controls are designed, reviewed, executed, and evidenced effectively
• Own the end-to-end IT SOX compliance program within the CIO organization, including the IT control inventory covering ITGCs, IT-dependent controls, and automated application controls
• Translate SOX compliance requirements into structured programs, processes, and scalable workflows that drive accountability and improve execution
• Own control design and documentation, including control narratives, risk and control matrices (RCMs), and supporting procedures, ensuring controls are clearly defined and audit-ready
• Partner with IT, Accounting as needed, and the SOX team to ensure new systems and modules are implemented with appropriate SDLC controls before go-live. Review control designs early to identify and mitigate SOX risks before implementation
• Partner with IT process owners and control operators to ensure controls are executed consistently and on time
• Build and improve the systems, workflows, and reporting used to manage control execution, evidence collection, issue tracking, and compliance visibility
• Review control evidence for quality, completeness, and alignment with control requirements before submission to auditors
• Manage the full deficiency lifecycle—from root cause analysis through remediation planning, retesting, and escalation—and report control health to IT leadership and the SOX team
• Lead root cause analyses for control failures and incidents, track and resolve systemic gaps, and implement and validate remediation plans that drive durable improvements and prevent recurrence

You’re energized by building processes and systems that improve how teams work

You’re comfortable balancing compliance rigor with practical, scalable solutions

You take ownership, bring structure to ambiguity, and follow issues through to resolution

You communicate clearly with technical and non-technical stakeholders and build strong cross-functional partnerships

Comfortable working in fast-moving, ambiguous environments with a builder’s mindset

Excellent written communication skills, with the ability to produce clear, auditor-ready documentation and translate technical concepts for non-technical stakeholders

Strong understanding of PCAOB auditing standards, the COSO framework, and COBIT as they apply to IT controls

Experience with GRC platforms such as Audit Board, Service Now GRC, Workiva, or similar tools

Deep familiarity with IT General Controls (ITGCs), including access management, change management, SDLC, and computer operations, and how they map to financial reporting risk Demonstrated ability to manage multiple work streams, deadlines, and stakeholders across engineering, finance, legal, and audit

Experience supporting enterprise business systems such as Workday, Salesforce, Net Suite or SAP, Coupa, and similar platforms6+ years of experience in IT audit, IT risk, IT compliance, or a related field, with hands-on IT SOX experience in either a practitioner or oversight capacity

We believe in investing in our people and value candidates who bring unique backgrounds—even if you don’t check every boxCISA, CISSP, CISM, or CPA certification

Experience in a hyperscaler, cloud infrastructure, or high-growth technology environment

Proven ability to establish or scale an IT SOX compliance program at a newly public or pre-IPO company