Senior IT SOX Specialist

Senior IT SOX Specialist Company:

The Boeing Company

Boeing has a current opening for an Senior IT SOX Specialist who will lead SOX tracking and control assurance for Enterprise Business Systems (EBS) as a member of the IT SOX Program Office (ITSPO) at our Plano, TX;
Chicago, IL;
Hazelwood, MO; or Kent, WA location. This role partners closely with the Risk & Compliance Lead and Boeing stakeholders to drive a robust risk/compliance posture, enable effective control processes, maintain audit readiness, and deliver timely reporting and remediation across Boeing systems and integrated processes.

• Serve as the primary SOX focal point for EBS: manage all SOX control inventories, testing schedules, evidence collection, and remediation tracking across enterprise systems
• Coordinate SOX testing activities with internal audit, external auditors, application owners, and control owners to ensure timely and effective testing and documentation
• Maintain and update the SOX control framework for EBS applications and integrations, including process flows, control owners, control descriptions, and risk mappings
• Drive remediation plans: track findings, assign owners, monitor remediation timelines, and elevate unresolved issues to the ITSPO Senior Manager and Risk & Compliance Lead
• Develop and maintain SOX dashboards, metrics, and status reporting to communicate risk posture, testing outcomes, and remediation progress to leadership and auditors
• Facilitate workshops and training for process and control owners on SOX compliance requirements, evidence standards, and best practices
• Partner with Boeing teams to align EBS processes and metrics to corporate SOX requirements, ensuring systems and procedures remain compliant through configuration, process design, or compensating control guidance
• Support continuous improvement initiatives to strengthen control design and testing efficiency (automation opportunities, control rationalization, and standardization)
• Participate in control design and change control reviews for system updates, releases, and process changes to minimize SOX risk exposure
• Maintain SOX documentation repositories and ensure traceability between risks, controls, tests, and remediation activities

• 5+ years of hands-on experience with SOX ITGC, Security Controls, Vulnerability Management processes, audit lifecycle and compliance practices
• 3+ years of testing internal controls, including key SOX controls
• Experience implementing and managing a cyber-risk management program, Sarbanes–Oxley (SOX) program, auditing of applications or processes, or other compliance programs
• Demonstrated experience building cross-functional consensus among internal and external stakeholders to drive business results

• Prior experience working in aerospace, defense, manufacturing, or other highly regulated industries
• Experience implementing or optimizing automated controls and control testing tools
• Familiarity with corporate compliance programs
• Familiarity with enterprise systems (e.g., SAP, Oracle, Workday, Salesforce) and integrations; experience with EBS or similar large-scale business system landscapes is a plus
• Proficient with compliance tools, GRC platforms, or test/evidence management systems; strong Excel and reporting skills
• Excellent communication skills — able to present findings, influence control owners, and liaise with auditors and senior stakeholders
• Strong organizational and project management skills, with attention to detail and ability to manage multiple deadlines

Successful candidates for this job must satisfy the Company’s Conflict of Interest (COI) assessment process.