IT SOX Advisory Specialist

Wise; Greater London; On-site; GBP 90,000 - 120,000; Full time

Job summary

Wise is seeking an IT SOX expert to strengthen our global platform's security, reliability, and compliance. You will lead scope rationalization, map dependencies, and optimize ITGCs and ITACs across applications and infrastructure.

Onboarding new systems with RACMs, supporting controls testing in cloud and SaaS environments, and collaborating with Finance, Risk, Security, and Platform teams to align on SOX 404 requirements will be core to this role.

Qualifications

• Experience with SOX 404 controls and IT governance frameworks.
• Ability to map and rationalize SOX scope across complex IT environments.
• Knowledge of ITGCs/ITACs and control testing in cloud/SaaS setups.

Responsibilities

• Scope Rationalization & Optimization: Analyze and challenge IT SOX scope across applications and infrastructure; identify duplicate or over-engineered ITGCs/ITACs and propose enhancements.
• New System Onboarding: Establish RACMs and identify ITGCs/ITACs for newly in-scope SOX applications and platforms.
• Dependency & System Mapping: Document end-to-end dependency maps for management review.
• Controls Testing: Support control testing (Design & Operating Effectiveness) across cloud and SaaS landscapes.
• Stakeholder Management: Partner with Finance, Risk, Security, Platform to communicate SOX 404 requirements and expectations.

Skills

IT SOX

RACMs

ITGCs

ITACs

Dependency maps

Controls testing

SOX 404

Job description

We are looking for an IT SOX expert to join our mission and help us build a global platform that’s scalable, reliable, and secure. The Security Controls team plays a vital role in safeguarding Wise’s complex IT landscape. We specialise in the comprehensive testing, assessment, and continuous improvement of technology-related controls. This role will require you to drive scope rationalization, dependency mapping, and control optimization.

Your Mission

• Scope Rationalization & Optimization: Analyze and challenge existing IT SOX scope across applications and infrastructure. Identify duplicate, redundant, or over-engineered ITGCs/ITACs and propose enhancements.
• New System Onboarding: Establish RACMs (Risk and Control Matrices) and identify necessary ITGCs and ITACs for newly in-scope SOX applications and platforms.
• Dependency & System Mapping: Document and maintain end-to-end dependency maps (upstream/downstream data flows, infrastructure ties, and automated interfaces) for management review.
• Controls Testing: Where needed, support control testing (Design & Operating Effectiveness) across our cloud infrastructure and SaaS landscape.
• Stakeholder Management: Partner with key stakeholders across Finance, Risk, Security, Platform to effectively communicate SOX 404 requirements and expectations.