Product Manager (Compliance)

Coreweave; Livingston; On-site; GBP 90,000 - 140,000; Full time

Job summary

Coreweave is seeking a Product Manager, IT SOX Compliance, to translate SOX requirements into structured programs and scalable workflows. You will own the IT SOX program within the CIO organization, covering ITGCs, IT-dependent controls, and automated application controls, while ensuring audit readiness across control design and evidence.

You will partner with IT, Accounting, and the SOX team to implement SDLC controls before go-live and drive durable remediation of any control deficiencies,

Qualifications

• 6+ years of IT audit, IT risk, IT compliance experience with hands-on IT SOX exposure.
• Experience building and scaling IT SOX programs in growing or pre-IPO environments.
• Strong knowledge of ITGCs, access management, change control, and SDLC.

Responsibilities

• Own end-to-end IT SOX compliance program within CIO org.
• Translate SOX requirements into structured programs and scalable workflows.
• Develop control narratives, RCMs, and supporting procedures for audit readiness.
• Review control designs and evidence; ensure timely execution by IT process owners.
• Manage deficiency lifecycle from root cause to remediation and retesting.
• Collaborate with IT, Accounting, and SOX team on new systems and modules.

Skills

SOX Compliance

ITGCs

SDLC Controls

RCMs

Audit Evidence

GRC Tools

Cross-functional

Education

6+ years IT audit / IT risk / IT compliance

Tools

AuditBoard

ServiceNow GRC

Workiva

Job description

• This is not a traditional audit-support role. As the Product Manager, IT SOX Compliance, you’ll translate SOX compliance requirements into structured programs, drive accountability across IT process owners, and build the systems and workflows that make compliance scalable


• You’ll work closely with the SOX team and IT process owners to ensure controls are designed, reviewed, executed, and evidenced effectively


• Own the end-to-end IT SOX compliance program within the CIO organization, including the IT control inventory covering ITGCs, IT-dependent controls, and automated application controls


• Translate SOX compliance requirements into structured programs, processes, and scalable workflows that drive accountability and improve execution


• Own control design and documentation, including control narratives, risk and control matrices (RCMs), and supporting procedures, ensuring controls are clearly defined and audit-ready


• Partner with IT, Accounting as needed, and the SOX team to ensure new systems and modules are implemented with appropriate SDLC controls before go-live. Review control designs early to identify and mitigate SOX risks before implementation


• Partner with IT process owners and control operators to ensure controls are executed consistently and on time


• Build and improve the systems, workflows, and reporting used to manage control execution, evidence collection, issue tracking, and compliance visibility


• Review control evidence for quality, completeness, and alignment with control requirements before submission to auditors


• Manage the full deficiency lifecycle—from root cause analysis through remediation planning, retesting, and escalation—and report control health to IT leadership and the SOX team


• Lead root cause analyses for control failures and incidents, track and resolve systemic gaps, and implement and validate remediation plans that drive durable improvements and prevent recurrence

You’re energized by building processes and systems that improve how teams workYou’re comfortable balancing compliance rigor with practical, scalable solutionsYou take ownership, bring structure to ambiguity, and follow issues through to resolutionYou communicate clearly with technical and non-technical stakeholders and build strong cross-functional partnershipsComfortable working in fast-moving, ambiguous environments with a builder’s mindsetExcellent written communication skills, with the ability to produce clear, auditor-ready documentation and translate technical concepts for non-technical stakeholdersStrong understanding of PCAOB auditing standards, the COSO framework, and COBIT as they apply to IT controlsExperience with GRC platforms such as AuditBoard, ServiceNow GRC, Workiva, or similar toolsDeep familiarity with IT General Controls (ITGCs), including access management, change management, SDLC, and computer operations, and how they map to financial reporting riskDemonstrated ability to manage multiple workstreams, deadlines, and stakeholders across engineering, finance, legal, and auditExperience supporting enterprise business systems such as Workday, Salesforce, NetSuite or SAP, Coupa, and similar platforms6+ years of experience in IT audit, IT risk, IT compliance, or a related field, with hands-on IT SOX experience in either a practitioner or oversight capacityWe believe in investing in our people and value candidates who bring unique backgrounds—even if you don’t check every boxCISA, CISSP, CISM, or CPA certificationExperience in a hyperscaler, cloud infrastructure, or high-growth technology environmentProven ability to establish or scale an IT SOX compliance program at a newly public or pre-IPO company