I&O SOX Control Operator

SOX Control Operator

Shift: Monday-Friday, standard working hours Duration – 12 months Work Mode – 100% remote Pay range: $91.24 - $91.24/hr.

The SOX Control Operator works closely with Control Owners, IT Risk Management (ITRM), internal audit, and external auditors to support walkthroughs, testing, and remediation activities. This role does not own control design, but is accountable for day-to-day control operation and evidence quality.

Key Responsibilities:

• Control Execution
• Execute assigned SOX IT controls (e.g., access reviews, privileged access, termination reviews, configuration and monitoring controls) in accordance with approved control descriptions, frequencies, and procedures.
• Perform control activities on required cadences (weekly, monthly, quarterly), ensuring completeness and accuracy of execution.
• Follow documented SOPs and control narratives precisely; identify gaps or ambiguities in procedures and escalate as needed.
• Evidence Collection & Management
• Collect, validate, and retain control evidence that meets audit standards for completeness, accuracy, and timeliness.
• Ensure evidence clearly demonstrates who performed the control, when it was performed, what was reviewed, and what conclusions were reached.
• Upload and manage artifacts in designated repositories and GRC tools (e.g., Audit Board, Docs, SharePoint) in alignment with documented processes.
• Perform quality checks on generated reports, system outputs, and supporting files prior to submission.
• Issue Identification & Escalation
• Identify execution issues, missing inputs, late dependencies, or anomalies during control operation.
• Escalate execution risks, potential deficiencies, or missed control deadlines to the Control Owner in a timely manner.
• Support Control Owners during deficiency investigation, root cause analysis, and remediation validation.
• Audit & Compliance Support
• Support internal and external audit activities, including walkthroughs, inquiries, and evidence requests.
• Respond to auditor questions related to control execution, evidence generation, and operational steps (not control design decisions).
• Maintain clear traceability between control descriptions, execution steps, and supporting evidence.
• Continuous Improvement & Automation Support
• Identify opportunities to improve control execution efficiency, standardization, and automation.
• Participate in automation initiatives (e.g., scheduled jobs, Power Automate workflows, standardized reporting) to reduce manual effort and execution risk.
• Provide feedback on SOP updates, control rationalization efforts, and tooling improvements.

Required Qualifications:

• Bachelor's degree in Information Systems, Accounting, Finance, Computer Science, or equivalent experience.
• Experience executing SOX IT controls or operational controls in a regulated environment.
• Working knowledge of SOX concepts, IT General Controls (ITGCs), and audit evidence requirements.
• Experience handling control evidence, documentation standards, and audit requests.
• Strong attention to detail and ability to follow defined procedures without deviation.
• Competencies in Microsoft O365 (Advanced Excel is a must)
• Strong Written and Verbal Communication Skills, and Presentation Skills

Preferred Qualifications:

• Experience supporting SOX controls in IT Operations domains (e.g., databases, infrastructure, access management, monitoring).
• Familiarity with GRC tools such as Audit Board and enterprise document repositories.
• Experience with automated or semi-automated control execution and reporting.
• Prior interaction with internal audit, external auditors, or IT Risk Management teams.

Key Skills &

Competencies:

• Control execution discipline and documentation rigor
• Evidence quality and audit readiness
• Risk awareness and escalation judgment
• Time management across multiple control cadences
• Clear written and verbal communication
• Process adherence with continuous improvement mindset
• Role Clarification
• Control Owner:
  Accountable for control design, effectiveness, and remediation decisions.
• Control Operator (this role):
  Accountable for executing the control as designed and producing complete, accurate evidence.

Top

Skills:

• Control execution discipline and documentation…