Principal Security & Compliance Analyst

Autodesk, Inc; Canada; On-site; CAD 125,000 - 184,000; Full time

Benefits offered by this job

Competitive salary and comprehensive福利

Professional development opportunities

Collaborative and innovative work环境

Flexible work arrangements

Job summary

Autodesk is seeking an experienced Compliance Analyst to lead key aspects of its Sarbanes-Oxley (SOX) IT General Controls (ITGC) program. This individual contributor role combines deep technical expertise, independent judgment, and business understanding to strengthen the IT control environment supporting financial reporting.

A successful candidate will take end-to-end ownership of significant ITGC workstreams, onboarding new systems into SOX scope, evaluating controls, and improving evidence

Qualifications

• 4–5 years of SOX 404 ITGC auditing, IT assurance, security compliance, or related work.
• Strong understanding of SOX 404 and IT general controls across on-prem and cloud.
• Experience evaluating complex control issues and driving initiatives with limited oversight.
• Experience with evidence collection or testing automation for access, change, and segregation of duties controls.

Responsibilities

• Lead end-to-end SOX ITGC program activities and audit readiness.
• Assess design and operating effectiveness of IT controls across environments.
• Serve as SME on SOX ITGC requirements and risk-based improvements.
• Identify control deficiencies and prioritize remediation with control owners.
• Onboard new systems into SOX scope and translate requirements into scalable controls.
• Lead automation and standardization to improve evidence collection, monitoring, and testing.
• Coordinate internal and external audit activities and provide technical guidance.
• Lead cross-functional initiatives from requirements to measurable outcomes.
• Promote best practices through guidance, training, and mentorship.

Skills

SOX ITGC auditing

IT security compliance

Regulatory compliance

Audit coordination

Education

Bachelor’s degree in Information Technology/Computer Science/Accounting

Professional certification: CISA/CISSP/CISM/CPA

Tools

SAP

Job description

Job Requisition ID #

26WD101016

Job Title: SOX IT Compliance Analyst [P4]

Location: Canada

Company: Autodesk

Job Type: Full-Time

Job Summary

Autodesk is seeking an experienced Compliance Analyst to lead key aspects of its Sarbanes-Oxley (SOX) IT General Controls (ITGC) program. This individual contributor role combines deep technical expertise, independent judgment, and business understanding to strengthen the effectiveness, scalability, and sustainability of the IT control environment supporting financial reporting.

A successful candidate will take end-to-end ownership of significant ITGC workstreams and initiatives, including onboarding new systems into SOX scope, evaluating controls for systems within SOX scope and improving evidence collection and testing through automation. They will interpret complex technical and regulatory requirements, evaluate business and compliance risks, and recommend practical solutions with minimal supervision.

Working closely with control owners, Engineering, IT, Security, Audit & Advisory Services, and external auditors, this individual will influence technical and control decisions, drive cross-functional outcomes, and help shape the ongoing improvement of Autodesk’s SOX ITGC program. The ability to assess IT controls in financial reporting environments and communicate effectively with technical stakeholders and management is essential.

Key Responsibilities

• Lead key aspects of the SOX ITGC program, with end-to-end accountability for assigned control domains, management testing, audit readiness, and continuous improvement initiatives.
• Independently assess the design and operating effectiveness of IT controls supporting financial reporting across on-premises and cloud environments.
• Serve as a subject matter expert on SOX ITGC requirements, evaluating complex control issues, assessing technical and business risks, and recommending risk-based improvements to strengthen SOX compliance.
• Assess control deficiencies and their business impact, recommend risk-based remediation priorities, and partner with control owners to drive timely and sustainable resolution.
• Partner with Engineering, IT, Security, and Audit & Advisory Services to onboard new systems into SOX scope, translating compliance requirements into effective and scalable controls and operational practices.
• Identify and lead automation and standardization initiatives to reduce redundant activities and improve the efficiency, consistency, and quality of SOX control execution, evidence collection, monitoring, testing, and documentation.
• Lead assigned internal and external audit activities, coordinating evidence requests and testing discussions, providing technical guidance, and resolving complex audit inquiries.
• Independently lead complex cross-functional initiatives from requirements definition and planning through execution, stakeholder adoption, and delivery of measurable outcomes.
• Promote best practices through technical guidance, knowledge sharing, training, and mentorship of less experienced colleagues and control owners.

Minimum Qualifications

• 4–5 years of experience in SOX 404 ITGC auditing, IT assurance, security compliance, information security, or a related discipline, including substantial hands-on technical work.
• Strong understanding of SOX 404, IT general controls, financial systems audit requirements, and control design in on-premises and cloud environments.
• Demonstrated ability to independently evaluate complex control issues, exercise sound judgment, and drive significant initiatives or workstreams with limited oversight.
• Experience assessing security controls, explaining requirements to technical control owners, and influencing decisions across cross-functional stakeholder groups.
• Experience with evidence collection or testing automation and evaluating the sufficiency of evidence for access management, change management, segregation of duties, and configuration management controls.
• Practical understanding of ITGC risks and controls in enterprise applications and systems supporting financial reporting.
• Strong written and verbal communication, analytical problem-solving, stakeholder management, and complex-project delivery skills.

Preferred Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Accounting, or related field.
• Professional certification such as CISA, CISSP, CISM, or CPA.
• Experience applying frameworks and standards such as COBIT, NIST, ISO 27001, SOC 2, or PCI DSS to IT control environments.
• Experience with audit and compliance platforms and tools used for control management, automated evidence collection, or continuous monitoring.
• Experience improving compliance processes, leading stakeholder adoption, or reducing duplication in SOX ITGC activities.
• Knowledge of and experience working with SAP, particularly in relation to IT general controls and financial reporting systems.

Benefits

• Competitive salary and comprehensive benefits package.
• Opportunities for professional development and continuous learning.
• Collaborative and innovative work environment.
• Flexible work arrangements.

About Autodesk

Welcome to Autodesk! Amazing things are created every day with our software – from the greenest buildings and cleanest cars to the smartest factories and biggest hit movies. We help innovators turn their ideas into reality, transforming not only how things are made, but what can be made.

We take great pride in our culture here at Autodesk – it’s at the core of everything we do. Our culture guides the way we work and treat each other, informs how we connect with customers and partners, and defines how we show up in the world.

When you’re an Autodesker, you can do meaningful work that helps build a better world designed and made for all. Ready to shape the world and your future? Join us!

À propos d’Autodesk

Bienvenue chez Autodesk ! Nos logiciels créent chaque jour des choses extraordinaires : des bâtiments les plus écologiques aux voitures les plus propres, en passant par les usines les plus intelligentes et les films à succès. Nous aidons les innovateurs à concrétiser leurs idées, transformant non seulement la façon dont les choses sont fabriquées, mais aussi ce qui peut l’être.

Nous sommes très fiers de notre culture chez Autodesk ; elle est au cœur de tout ce que nous faisons. Notre culture guide notre façon de travailler et de nous comporter les uns envers les autres, influence nos interactions avec nos clients et nos partenaires, et définit notre image au monde.

En tant qu’Autodeskien, vous pouvez accomplir un travail significatif qui contribue à bâtir un monde meilleur, conçu et réalisé pour tous. Prêt à façonner le monde et votre avenir ? Rejoignez-nous !

Salary transparency / Transparence Salariale

Salary is one part of Autodesk’s competitive compensation package. For Canada based roles, we expect a starting base salary between $125,000 and $183,700 Annual. Offers are based on the candidate’s experience and geographic location, and may exceed this range. In addition to base salaries, our compensation package may include annual cash bonuses, commissions for sales roles, stock grants, and a comprehensive benefits package.

Le salaire est l'un des éléments du programme de rémunération concurrentiel d'Autodesk. Pour les postes basés au Canada, nous offrons un salaire de base entre $125,000 et $183,700 annuel. Le salaire est déterminé selon l'expérience professionnelle et l'emplacement du candidat(e), et peut dépasser cette fourchette. En plus du salaire de base, notre programme de rémunération peut inclure une prime annuelle, des commissions pour les postes de ventes, des attributions d'actions et un ensemble complet d'avantages sociaux.

Belonging / appurtenance

We take pride in cultivating a culture of belonging where everyone can thrive. Learn more here: https://www.autodesk.com/company/global-belonging

Nous sommes fiers de cultiver une culture d’appartenance où chacun peut s’épanouir. Pour en savoir plus, cliquez ici: https://www.autodesk.com/company/global-belonging

In-Person Onboarding and Identity Verification

Intégration en présentiel et vérification d’identité

This role may require in-person onboarding and/or in-person ID verification.

Ce poste peut nécessiter une intégration et/ou une vérification d'identité en présentiel.