Senior IT SOX Controller

Role and Responsibilities

1. Internal Control & Audit campaigns planning and execution 

• Implement internal control and train the control owners. 

• Plan, prepare, and lead IT Internal Control and Compliance audit/assessment campaigns across the organization, identifying areas of improvement and compliance risks, ensuring quality and timely delivery of results. Those campaigns will be based on various IT & Cyber frameworks.

• Assess and monitor IT General Controls (ITGC), systems, and processes to ensure compliance with policies, regulations, and best practices

• Review and update the associated Risk Control Matrix (RCM).

2. Team Supervision and Development

• Review and validate audit work performed by team members, providing constructive feedback and guidance

• Coach, mentor, and develop junior staff to build expertise and ensure consistent audit standards

3. Documentation and Reporting

• Document findings, prepare reports, and present recommendations to management

• Initiate the reporting presentation for management

• Ensure that the documentation is well updated on our GRC Tool application

4. Stakeholder Collaboration

• Closely works with control owners to ensure a good understanding of Internal Control requirements

• Collaborate with IT, information security, and business teams to strengthen governance frameworks and support the implementation of IT policies, standards, and procedures

5. Continuous Improvement and Awareness

• Stay up to date with emerging technologies, cybersecurity threats, and regulatory requirements

Experience and Skills

Education and experience

• Bachelor’s degree in Information Technology, Computer Science, Information Systems, or related field (Master’s degree preferred)
• Professional certifications such as CISA, CISM, CISSP, or ISO 27001 Lead Auditor strongly preferred
• At least 5 to 8 years of experience in IT Audit and/or IT Internal Control, ITGC/SOX Compliance project,  Security, GRC Governance, Risk and Compliance.
• In-depth knowledge of IT general controls (ITGC), cybersecurity frameworks, and regulatory requirements (e.g., SOX, GDPR, ISO, NIST, COBIT)
• Strong experience in audit methodologies, risk assessment, and reporting at senior management level
• Proven ability to manage audit teams, lead complex engagements, and influence stakeholders

Skills and behavioral competencies

• Proven ability to work independently and proactively manage deliverables in a fast-paced environment.
• Advanced analytical and critical-thinking skills, capable of identifying complex risks and designing effective solutions
• Excellent communication and presentation skills, able to engage confidently with senior stakeholders business people and non-technical audiences
• Strategic mindset with the ability to balance detail-oriented audit work with big-picture risk management goals
• Strong organizational skills, able to manage multiple projects, deadlines, and priorities in a fast-paced environment
• High ethical standards, integrity, and professional judgment
• Collaborative and influential, skilled at building strong cross-functional relationships
• Adaptability and resilience in navigating change and evolving technologies

What We Offer