Manager, SOX

Overview

About Us
Planet Fitness, founded in 1992 in Dover, NH, is one of the largest franchisors and operators of fitness centers in the United States with over 2,700+ stores across 50 states, the District of Columbia, Puerto Rico, Canada, Panama, Mexico, Spain, and Australia. 90% of Planet Fitness stores are owned and operated by independent franchisees. Our mission is to enhance people’s lives by providing a high-quality fitness experience in a welcoming, non-intimidating environment.

We foster an inclusive culture that supports professional growth, celebrates teamwork, and drives a positive impact in local communities through the Judgement Free Generation initiative.

We’ve helped millions on their fitness journeys for 30 years and are just getting started.

The Manager, SOX’s primary responsibility will be to lead and continually improve the Company’s Sarbanes-Oxley (SOX) compliance program, ensuring the design, operation, and audit readiness of information technology related internal controls over financial reporting (ICFR). This role partners with Finance, Information Technology (IT), Internal Audit and Information Security, and collaborates with Security Operations to assess security-related controls and incidents as they relate to SOX requirements.

The role may also involve working on other compliance programs such as GDPR and PCI as time permits. This position follows a hybrid schedule in Hampton, NH, with in-office presence required M/T/W; TH/F are optional work-from-home. Candidates must reside within commuting distance; fully remote work is not available.

• SOX Program Ownership & Governance
  • Own the end-to-end SOX compliance program for IT, including scoping, risk assessment, control design, testing, remediation, and reporting
  • Lead annual SOX planning and quarterly execution, ensuring timely completion of support required for Internal Audit testing, management certifications and external reporting
  • Ensure compliance with SOX Section 404, COSO framework, and PCAOB standards
  • Prepare, review, and maintain SOX risk and control documentation, including flowcharts and periodic evidence of control performance
  • Manage all incremental Internal and External Audit testing evidence requests
• Internal Controls & Risk Management
  • Participate in External Audit led IT process and control walkthroughs to evaluate the effective design of IT general controls
  • Ensure timely and accurate evidence of operating effectiveness of key IT General Controls including access management, change management, system monitoring, and data integrity controls
  • Participate in joint testing with External and Internal Audit of key application controls and system generated reports
  • Identify control gaps, deficiencies, and emerging risks; partner with control owners and Internal Audit to remediate
  • Assess the SOX impact of business and technology changes, including new systems, international expansion, franchise growth, organizational changes, and acquisitions
  • For all key technology vendors, ensure appropriate SOC audits are performed and review reports for deficiencies and mapping of CUECs to controls
• Information Security Partnership
  • Partner with Information Security and Security Operations to understand the design and operation of security controls relevant to SOX
  • Assess the SOX and ICFR impact of security incidents in collaboration with SECOPS
  • Coordinate collection and evaluation of security-related evidence for SOX testing while maintaining independence from day-to-day security operations
• Audit Management
  • Serve as primary point of contact for internal and external auditors related to SOX and ICFR
  • Coordinate walkthroughs, testing requests, deficiency evaluations, and remediation follow-ups
  • Support management in evaluating and communicating control deficiencies, including severity assessments and remediation status
• Process Improvement & Scalability
  • Drive continuous improvement of SOX processes by standardizing controls, reducing redundancy, and leveraging automation where appropriate
  • Utilize SOX and GRC tools to improve efficiency, transparency, and documentation quality
  • Stay current on regulatory guidance, SOX best practices, and…