Lead, IT SOX Risk Advisory

Overview

Come join Intuit as an IT SOX Lead Risk Advisor within the SOX Risk and Compliance Organization (SRCO). SRCO is a management‑led function purpose‑built to deliver a modern, sustainable, and risk‑focused SOX program that scales with the business. It enables Intuit's continued growth by establishing a strong foundation of financial compliance, risk management, and operational excellence.

Within SRCO, the SOX Risk Advisory team acts as strategic advisors to business process owners, control owners, and our Technology Compliance and Risk Management Organization (TCRM) to ensure financial reporting integrity and readiness for business change.

• Serve as an end‑to‑end process and IT control expert advising control and process owners on SOX requirements, risk assessment, control design, and optimization strategies.
• Drive the readiness intake and assessment process for control changes, business process transformations, and new initiatives to identify relevant risks and SOX impact with clear and thorough rationale.
• Own end‑to‑end project management for SOX readiness initiatives, including scoping, milestone tracking, stakeholder coordination, issue escalation, and readiness sign‑off, ensuring each initiative moves predictably from intake to control activation.
• Quickly develop a deep understanding of processes and systems to identify key financial statement and technology risks, and influence the implementation or modification of controls that are audit‑effective, business‑friendly, and scalable across all aspects of scoping, level of effort, and testing complexity.
• Draft risk and control matrices (RCMs), including key systems, tools, and service providers, based on review of management artifacts and walkthroughs across stakeholder groups.
• Lead structured walkthroughs and readiness operating mechanisms with engineering, product, and business control owners, driving accountability for action items and timely resolution of control design gaps.
• Design and execute new and updated testing procedures for automated controls (ITACs) to ensure control evidence and scope are sufficient and aligned with risk.
• Manage the deficiency evaluation process including root cause analysis, impact assessment, management action plan development, remediation monitoring, and validation.
• Apply AI‑assisted workflows to perform SOX readiness assessments, including use of large language model tools to analyze PRDs, engineering specs, and system change documentation for ICFR risk signals, scope determinations, and control gap identification.
• Leverage AI tooling to draft control narratives, risk memos, WCGW analyses, and scoping recommendations, accelerating throughput across a high‑volume readiness portfolio while maintaining audit‑quality rigor.
• Cultivate strong relationships with leaders across Finance, Product Development, and the Business and partner with process owners, control owners, and the Technical Compliance team to drive timely, high‑quality decision‑making and awareness of SOX requirements and control strategy.
• Lead with an extreme sense of ownership and a forward‑looking mindset to drive operational excellence and continuous improvement within our control environment.

• 8+ years of experience in internal audit, SOX compliance, risk advisory, or public accounting. Experience in the Fin Tech or software industry is preferred.
• Bachelor's or Master's degree in a relevant discipline such as Computer Science, Computer Engineering, or Information Systems, or equivalent experience. CISA, CISSP, AWS Certified Cloud Practitioner or above, CPA, or CIA preferred.
• Must be able to work onsite in the Atlanta, San Diego, or Mountain View office 3 days a week.
• Robust experience testing and designing complex business process ITACs, with strong understanding of technology risk, financial reporting risk, internal controls (automated and ITGC), and PCAOB requirements.
• Demonstrated project management capability, including managing multiple concurrent initiatives with distinct scope, timelines, stakeholders, and control deliverables, with high quality and appropriate urgency.
• Practical experience using AI tools (e.g.,…