Senior IT SOX Specialist

• Lead SOX tracking and control assurance for Enterprise Business Systems as a member of the IT SOX Program Office
• Serve as the primary SOX focal point for EBS
• Manage SOX control inventories, testing schedules, evidence collection, and remediation tracking across enterprise systems
• Coordinate SOX testing with internal audit, external auditors, application owners, and control owners
• Maintain and update the SOX control framework for EBS applications and integrations
• Drive remediation plans, track findings, assign owners, monitor timelines, and escal
• Develop and maintain SOX dashboards, metrics, and status reporting for leadership and auditors
• Facilitate workshops and training for process and control owners
• Align EBS processes and metrics to corporate SOX requirements
• Support continuous improvement, including automation opportunities, control rationalization, and standardization
• Participate in control design and change control reviews for system updates, releases, and process changes
• Maintain SOX documentation repositories and traceability between risks, controls, tests, and remediation activities
• Partner with the Risk & Compliance Lead, ITSPO Senior Manager, Boeing stakeholders, auditors, and control owners

• 5+ years of hands-on experience with SOX ITGC, Security Controls, Vulnerability Management processes, audit lifecycle and compliance practices
• 3+ years of testing internal controls, including key SOX controls
• Experience implementing and managing a cyber-risk management program, Sarbanes–Oxley (SOX) program, auditing of applications or processes, or other compliance programs
• Demonstrated experience building cross-functional consensus among internal and external stakeholders
• Prior experience in aerospace, defense, manufacturing, or other highly regulated industries is preferred
• Experience implementing or optimizing automated controls and control testing tools is preferred
• Familiarity with corporate compliance programs
• Familiarity with enterprise systems such as SAP, Oracle, Workday, Salesforce and integrations; EBS or similar large-scale business system landscapes is a plus
• Proficiency with compliance tools, GRC platforms, or test/evidence management systems
• Strong Excel and reporting skills
• Excellent communication skills
• Strong organizational and project management skills
• Must satisfy the Company's Conflict of Interest assessment process
• Must meet U.S. export control compliance requirements and qualify as a U.S. Person
• Employer will not sponsor applicants for employment visa status

Demonstrates expertise in SOX ITGC, Security Controls, and compliance practices, with a strong focus on managing SOX control inventories and testing. Proficient in developing dashboards and metrics for leadership reporting while facilitating cross-functional collaboration and continuous improvement initiatives.

• SOX ITGC Management
• Internal Control Testing
• Cyber-Risk Management Program
• Compliance Tools Proficiency
• Project Management Skills

• SOX Control Framework
• Vulnerability Management
• Audit Lifecycle
• Automated Controls Implementation
• Excel Proficiency
• Reporting Skills

• Excellent Communication Skills
• Strong Organizational Skills
• Project Management Skills

• Aerospace
• Defense
• Manufacturing
• Regulated Industries
• Corporate Compliance Programs

• GRC Platforms
• Test Management Systems
• SAP
• Oracle
• Workday
• Salesforce