Principal Security & Compliance Analyst

Autodesk, Inc; Toronto; On-site; CAD 125,000 - 184,000; Full time

Benefits offered by this job

Professional development

Collaborative environment

Flexible work arrangements

Job summary

Autodesk, Canada-based, is seeking a SOX IT Compliance Analyst to lead its SOX ITGC program, oversee design and operation of IT controls for financial reporting, and drive automation across evidence collection and testing. The role collaborates with Engineering, IT, Security, and Audit teams to ensure audit readiness, control effectiveness, and scalable risk management.

The successful candidate will onboard new systems into scope, assess control deficiencies, and partner with control owners to

Qualifications

• 4–5 years of experience in SOX 404 ITGC auditing or related field.
• Strong understanding of SOX 404 and IT general controls across on-prem and cloud environments.
• Experience with evidence collection and testing automation for access, change, SD, and configuration controls.

Responsibilities

• Lead key aspects of the SOX ITGC program with end-to-end accountability for control domains.
• Assess design and operating effectiveness of IT controls supporting financial reporting.
• Onboard new systems into SOX scope and translate requirements into scalable controls.
• Lead automation and standardization to improve evidence collection, monitoring, and testing.
• Coordinate internal and external audit activities and provide technical guidance.

Skills

SOX ITGC

ITGC auditing

Information security

Security compliance

Cross-functional collaboration

Education

Bachelor's degree in IT/CS/Accounting

Tools

Audit platforms

Automation tools

Job description

Job ID26WD101016Job ID26WD101016Job Requisition ID #26WD101016Job Title: SOX IT Compliance Analyst [P4]Location: CanadaCompany: AutodeskJob Type: Full-TimeJob SummaryAutodesk is seeking an experienced Compliance Analyst to lead key aspects of its Sarbanes-Oxley (SOX) IT General Controls (ITGC) program. This individual contributor role combines deep technical expertise, independent judgment, and business understanding to strengthen the effectiveness, scalability, and sustainability of the IT control environment supporting financial reporting.A successful candidate will take end-to-end ownership of significant ITGC workstreams and initiatives, including onboarding new systems into SOX scope, evaluating controls for systems within SOX scope and improving evidence collection and testing through automation. They will interpret complex technical and regulatory requirements, evaluate business and compliance risks, and recommend practical solutions with minimal supervision.Working closely with control owners, Engineering, IT, Security, Audit & Advisory Services, and external auditors, this individual will influence technical and control decisions, drive cross-functional outcomes, and help shape the ongoing improvement of Autodesk’s SOX ITGC program. The ability to assess IT controls in financial reporting environments and communicate effectively with technical stakeholders and management is essential.Key ResponsibilitiesLead key aspects of the SOX ITGC program, with end-to-end accountability for assigned control domains, management testing, audit readiness, and continuous improvement initiatives.Independently assess the design and operating effectiveness of IT controls supporting financial reporting across on-premises and cloud environments.Serve as a subject matter expert on SOX ITGC requirements, evaluating complex control issues, assessing technical and business risks, and recommending risk-based improvements to strengthen SOX compliance.Assess control deficiencies and their business impact, recommend risk-based remediation priorities, and partner with control owners to drive timely and sustainable resolution.Partner with Engineering, IT, Security, and Audit & Advisory Services to onboard new systems into SOX scope, translating compliance requirements into effective and scalable controls and operational practices.Identify and lead automation and standardization initiatives to reduce redundant activities and improve the efficiency, consistency, and quality of SOX control execution, evidence collection, monitoring, testing, and documentation.Lead assigned internal and external audit activities, coordinating evidence requests and testing discussions, providing technical guidance, and resolving complex audit inquiries.Independently lead complex cross-functional initiatives from requirements definition and planning through execution, stakeholder adoption, and delivery of measurable outcomes.Promote best practices through technical guidance, knowledge sharing, training, and mentorship of less experienced colleagues and control owners.Minimum Qualifications• 4–5 years of experience in SOX 404 ITGC auditing, IT assurance, security compliance, information security, or a related discipline, including substantial hands-on technical work.• Strong understanding of SOX 404, IT general controls, financial systems audit requirements, and control design in on-premises and cloud environments.• Demonstrated ability to independently evaluate complex control issues, exercise sound judgment, and drive significant initiatives or workstreams with limited oversight.• Experience assessing security controls, explaining requirements to technical control owners, and influencing decisions across cross-functional stakeholder groups.• Experience with evidence collection or testing automation and evaluating the sufficiency of evidence for access management, change management, segregation of duties, and configuration management controls.• Practical understanding of ITGC risks and controls in enterprise applications and systems supporting financial reporting.• Strong written and verbal communication, analytical problem-solving, stakeholder management, and complex-project delivery skills.Preferred Qualifications• Bachelor’s degree in Information Technology, Computer Science, Accounting, or related field.• Professional certification such as CISA, CISSP, CISM, or CPA.• Experience applying frameworks and standards such as COBIT, NIST, ISO 27001, SOC 2, or PCI DSS to IT control environments.• Experience with audit and compliance platforms and tools used for control management, automated evidence collection, or continuous monitoring.• Experience improving compliance processes, leading stakeholder adoption, or reducing duplication in SOX ITGC activities.• Knowledge of and experience working with SAP, particularly in relation to IT general controls and financial reporting systems.Benefits• Competitive salary and comprehensive benefits package.• Opportunities for professional development and continuous learning.• Collaborative and innovative work environment.• Flexible work arrangements.Learn MoreAbout AutodeskWelcome to Autodesk! Amazing things are created every day with our software – from the greenest buildings and cleanest cars to the smartest factories and biggest hit movies. We help innovators turn their ideas into reality, transforming not only how things are made, but what can be made.We take great pride in our culture here at Autodesk – it’s at the core of everything we do. Our culture guides the way we work and treat each other, informs how we connect with customers and partners, and defines how we show up in the world.When you’re an Autodesker, you can do meaningful work that helps build a better world designed and made for all. Ready to shape the world and your future? Join us!Salary transparencySalary is one part of Autodesk’s competitive compensation package. For Canada based roles, we expect a starting base salary between $125,000 and $183,700. Offers are based on the candidate’s experience and geographic location, and may exceed this range. In addition to base salaries, our compensation package may include annual cash bonuses, commissions for sales roles, stock grants, and a comprehensive benefits package.BelongingWe take pride in cultivating a culture of belonging where everyone can thrive. Learn more here: https://www.autodesk.com/company/global-belongingIn-Person Onboarding and Identity VerificationThis role may require in-person onboarding and/or in-person ID verification.