IT SOX Compliance: Product & Program Lead

Coreweave; Livingston; On-site; GBP 90,000 - 140,000; Full time

Job summary

Coreweave is seeking a Product Manager, IT SOX Compliance, to translate SOX requirements into structured programs and scalable workflows. You will own the IT SOX program within the CIO organization, covering ITGCs, IT-dependent controls, and automated application controls, while ensuring audit readiness across control design and evidence.

You will partner with IT, Accounting, and the SOX team to implement SDLC controls before go-live and drive durable remediation of any control deficiencies,

Qualifications

• 6+ years of IT audit, IT risk, IT compliance experience with hands-on IT SOX exposure.
• Experience building and scaling IT SOX programs in growing or pre-IPO environments.
• Strong knowledge of ITGCs, access management, change control, and SDLC.

Responsibilities

• Own end-to-end IT SOX compliance program within CIO org.
• Translate SOX requirements into structured programs and scalable workflows.
• Develop control narratives, RCMs, and supporting procedures for audit readiness.
• Review control designs and evidence; ensure timely execution by IT process owners.
• Manage deficiency lifecycle from root cause to remediation and retesting.
• Collaborate with IT, Accounting, and SOX team on new systems and modules.

Skills

SOX Compliance

ITGCs

SDLC Controls

RCMs

Audit Evidence

GRC Tools

Cross-functional

Education

6+ years IT audit / IT risk / IT compliance

Tools

AuditBoard

ServiceNow GRC

Workiva

Job description

Coreweave is seeking a Product Manager, IT SOX Compliance, to translate SOX requirements into structured programs and scalable workflows. You will own the IT SOX program within the CIO organization, covering ITGCs, IT-dependent controls, and automated application controls, while ensuring audit readiness across control design and evidence.

You will partner with IT, Accounting, and the SOX team to implement SDLC controls before go-live and drive durable remediation of any control deficiencies,