SOX Project Manager

Job Description

This role involves performing monthly and semi-annual access validations on SOX and non-SOX business applications. It also includes oversight of IT compliance, access management, change management, system operations and the SDLC. The incumbent will gather access data, reconcile actual account permissions, implement corrections, and generate updated access lists. Deep understanding of management assessment of internal controls, experience with Active Directory and QAR evidence preparation, internal and external audit, and proficiency with GRC tools such as Audit Board and Service Now are required.

The role requires coordination with application, engineering, and finance teams to fix gaps and implement automated workflow triggers.

• Perform monthly and semi-annual access validations on SOX and non-SOX business applications.
• Oversee IT compliance, access management, change management, system operations, and SDLC.
• Gather access data (user access list, access permissions/roles and environment).
• Reconcile actual account permissions (remove/deactivate vs keep).
• Implement corrections and gather updated access lists.
• Provide deep understanding of management assessment of internal controls.
• Work with auditors to present SOX status reports and deficiency impacts to the Audit committee or CFO.
• Provide evidence to both external and internal auditors.
• Use GRC tools such as Audit Board and Service Now.
• Resolve deficiencies raised by auditors and coordinate with application teams in periodic reviews.
• Collaborate with engineering and finance teams to fix gaps, often by implementing automated workflow triggers.
• Create weekly and monthly reports for auditors.
• Attend daily progress SCRUM meetings and provide task updates.
• Understand application scope and work on periodic reviews.
• Understand auditor findings for various applications.

• PMP (Project Management Professional)
• CISA (Certified Information Systems Auditor)
• CISM (Certified Information Security Manager)
• CMA, ACA & CPFA

• Strong communication skills
• Create status reports and publish
• Coordinate with multiple stakeholders
• Coordinate with team across multiple towers
• Connect various stakeholders to gather evidence

• IT background, preferably IT application lifecycle.
• Proficiency in using GRC tools like Audit Board, Service Now.

$100,000 to $120,000 Per Annum

• Discretionary Annual Incentive.
• Comprehensive Medical Coverage:
  Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.
• Family Support:
  Maternal & Parental Leaves.
• Insurance Options:
  Auto & Home Insurance, Identity Theft Protection.
• Convenience & Professional Growth:
  Commuter Benefits, Certification & Training Reimbursement.
• Time Off:
  Vacation, Time Off, Sick Leave & Holidays.
• Legal & Financial Assistance:
  Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.

Bachelor of Computer Science