Principal Security & Compliance Analyst

Autodesk; Toronto; On-site; CAD 125,000 - 184,000; Full time

Benefits offered by this job

Competitive salary

Comprehensive benefits

Professional development

Flexible work arrangements

Job summary

Autodesk seeks an experienced SOX IT Compliance Analyst to own ITGC workstreams and drive control design, testing, and evidence collection for financial reporting. The role blends technical depth with cross‑functional collaboration across IT, Security, Audit & Advisory Services, and external auditors.

The successful candidate will shape SOX scope, evaluate control deficiencies, and implement scalable, automated controls across on‑premises and cloud environments with minimal supervision.

Qualifications

• 4–5 years of experience in SOX 404 ITGC auditing, IT assurance, security compliance, information security, or related discipline.
• Strong understanding of SOX 404, IT general controls, and cloud/on‑premise environments.
• Ability to independently evaluate complex control issues and drive initiatives.
• Experience explaining security requirements to control owners and influencing decisions.
• Experience with evidence collection or testing automation.

Responsibilities

• Lead end-to-end SOX ITGC program activities and testing.
• Assess design and operating effectiveness of IT controls for financial reporting.
• Recommend risk-based improvements and remediation priorities.
• Onboard new systems into SOX scope and translate requirements into scalable controls.
• Drive automation, evidence collection, and testing efficiency.
• Coordinate internal and external audit activities and provide technical guidance.
• Deliver cross-functional initiatives from planning to measurable outcomes.
• Mentor colleagues and control owners with best practices.

Skills

SOX 404 ITGC auditing

IT general controls

evidence collection automation

stakeholder communication

cloud/on-prem controls

Education

Bachelor's degree in IT/CS/Accounting

CISA/CISSP/CISM/CPA certification

Tools

SAP

Audit management platforms

Job description

Job Title: SOX IT Compliance Analyst [P4]

Location: Canada

Company: Autodesk

Job Type: Full-Time

Job Summary

Autodesk is seeking an experienced Compliance Analyst to lead key aspects of its Sarbanes-Oxley (SOX) IT General Controls (ITGC) program. This individual contributor role combines deep technical expertise, independent judgment, and business understanding to strengthen the effectiveness, scalability, and sustainability of the IT control environment supporting financial reporting.

A successful candidate will take end-to-end ownership of significant ITGC workstreams and initiatives, including onboarding new systems into SOX scope, evaluating controls for systems within SOX scope and improving evidence collection and testing through automation. They will interpret complex technical and regulatory requirements, evaluate business and compliance risks, and recommend practical solutions with minimal supervision.

Working closely with control owners, Engineering, IT, Security, Audit & Advisory Services, and external auditors, this individual will influence technical and control decisions, drive cross-functional outcomes, and help shape the ongoing improvement of Autodesk’s SOX ITGC program. The ability to assess IT controls in financial reporting environments and communicate effectively with technical stakeholders and management is essential.

Key Responsibilities

• Lead key aspects of the SOX ITGC program, with end-to-end accountability for assigned control domains, management testing, audit readiness, and continuous improvement initiatives.
• Independently assess the design and operating effectiveness of IT controls supporting financial reporting across on-premises and cloud environments.
• Serve as a subject matter expert on SOX ITGC requirements, evaluating complex control issues, assessing technical and business risks, and recommending risk-based improvements to strengthen SOX compliance.
• Assess control deficiencies and their business impact, recommend risk-based remediation priorities, and partner with control owners to drive timely and sustainable resolution.
• Partner with Engineering, IT, Security, and Audit & Advisory Services to onboard new systems into SOX scope, translating compliance requirements into effective and scalable controls and operational practices.
• Identify and lead automation and standardization initiatives to reduce redundant activities and improve the efficiency, consistency, and quality of SOX control execution, evidence collection, monitoring, testing, and documentation.
• Lead assigned internal and external audit activities, coordinating evidence requests and testing discussions, providing technical guidance, and resolving complex audit inquiries.
• Independently lead complex cross-functional initiatives from requirements definition and planning through execution, stakeholder adoption, and delivery of measurable outcomes.
• Promote best practices through technical guidance, knowledge sharing, training, and mentorship of less experienced colleagues and control owners.

Minimum Qualifications

• 4–5 years of experience in SOX 404 ITGC auditing, IT assurance, security compliance, information security, or a related discipline, including substantial hands‑on technical work.
• Strong understanding of SOX 404, IT general controls, financial systems audit requirements, and control design in on-premises and cloud environments.
• Demonstrated ability to independently evaluate complex control issues, exercise sound judgment, and drive significant initiatives or workstreams with limited oversight.
• Experience assessing security controls, explaining requirements to technical control owners, and influencing decisions across cross-functional stakeholder groups.
• Experience with evidence collection or testing automation and evaluating the sufficiency of evidence for access management, change management, segregation of duties, and configuration management controls.
• Practical understanding of ITGC risks and controls in enterprise applications and systems supporting financial reporting.
• Strong written and verbal communication, analytical problem-solving, stakeholder management, and complex‑project delivery skills.

Preferred Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Accounting, or related field.
• Professional certification such as CISA, CISSP, CISM, or CPA.
• Experience applying frameworks and standards such as COBIT, NIST, ISO 27001, SOC 2, or PCI DSS to IT control environments.
• Experience with audit and compliance platforms and tools used for control management, automated evidence collection, or continuous monitoring.
• Experience improving compliance processes, leading stakeholder adoption, or reducing duplication in SOX ITGC activities.
• Knowledge of and experience working with SAP, particularly in relation to IT general controls and financial reporting systems.

Benefits

• Competitive salary and comprehensive benefits package.
• Opportunities for professional development and continuous learning.
• Collaborative and innovative work environment.
• Flexible work arrangements.

Learn More

About Autodesk

Welcome to Autodesk! Amazing things are created every day with our software – from the greenest buildings and cleanest cars to the smartest factories and biggest hit movies. We help innovators turn their ideas into reality, transforming not only how things are made, but what can be made.

We take great pride in our culture here at Autodesk – it’s at the core of everything we do. Our culture guides the way we work and treat each other, informs how we connect with customers and partners, and defines how we show up in the world.

When you’re an Autodesker, you can do meaningful work that helps build a better world designed and made for all. Ready to shape the world and your future? Join us!

Salary transparency

Salary is one part of Autodesk’s competitive compensation package. For Canada based roles, we expect a starting base salary between $125,000 and $183,700. Offers are based on the candidate’s experience and geographic location, and may exceed this range. In addition to base salaries, our compensation package may include annual cash bonuses, commissions for sales roles, stock grants, and a comprehensive benefits package.

Belonging

We take pride in cultivating a culture of belonging where everyone can thrive. Learn more here: https://www.autodesk.com/company/global-belonging

In-Person Onboarding and Identity Verification

This role may require in-person onboarding and/or in-person ID verification.