Senior SOX IT Auditor

Workday, Inc.; Pune District; Hybrid; INR 1,800,000 - 2,400,000; Full time

Benefits offered by this job

Flex Work

Job summary

Workday, Inc. in Pune is seeking a Senior SOX IT Auditor to lead risk‑based IT controls assessments for financial reporting. You will partner with Technology, Finance, accounting, and external auditors to test design and operating effectiveness of controls across the tech landscape.

You will drive remediation, document test evidence, and support continuous improvement in GRC and audit management while ensuring SOX readiness. This role offers flexible, hybrid work arrangements.

Qualifications

• Bachelor’s degree in Information Systems, Computer Science, Accounting, Finance, Audit, or related discipline.
• 8+ years of progressive experience in IT audit, SOX compliance, internal controls, technology risk, or risk advisory.
• Strong working knowledge of SOX, IT general controls, automated application controls, and IT‑dependent manual controls.

Responsibilities

• Lead end‑to‑end, risk‑based SOX testing for IT general controls, automated application controls, and IT‑dependent manual controls.
• Assess the design and operating effectiveness of controls across logical access, privileged access, change management, system development lifecycle, interfaces, and data integrity.
• Partner with control and system owners to understand end‑to‑end business and technology processes, identify financial‑reporting risks, and define effective control activities.
• Review requirements, solution designs, implementation plans, and evidence for significant changes affecting SOX‑scoped systems and processes.
• Evaluate UAT and associated documentation for SOX‑scoped implementations and significant system changes, where applicable.
• Develop clear test plans, workpapers, evidence requests, testing conclusions, and issue documentation in accordance with internal methodology.
• Communicate control findings, root causes, and practical remediation recommendations to technical and business stakeholders.
• Track remediation plans and elevate risks or delays as appropriate.
• Support quarterly and annual management SOX assessments, including coordination with external auditors.
• Serve as a trusted advisor to stakeholders on control design, documentation, evidence quality, and audit readiness.
• Contribute to continuous improvement through control rationalization, automation, analytics, and enhancements to GRC and audit‑management processes.
• Coach and review the work of junior team members as needed.

Skills

SOX IT Audit

IT General Controls

Test Planning

Stakeholder Collaboration

Education

Bachelor’s degree in Information Systems/CS/Accounting/Finance/Audit

Tools

ERP

SaaS

Cloud

GRC Tools

Job description

Your work days are brighter here. We’re obsessed with making hard work pay off, for our people, our customers, and the world around us. As a Fortune 500 company and a leading AI platform for managing people, money, and agents, we’re shaping the future of work so teams can reach their potential and focus on what matters most. The minute you join, you’ll feel it. Not just in the products we build, but in how we show up for each other. Our culture is rooted in integrity, empathy, and shared enthusiasm. We’re in this together, tackling big challenges with bold ideas and genuine care. We look for curious minds and courageous collaborators who bring sun‑drenched optimism and drive. Whether you’re building smarter solutions, supporting customers, or creating a space where everyone belongs, you’ll do meaningful work with Workmates who’ve got your back. In return, we’ll give you the trust to take risks, the tools to grow, the skills to develop and the support of a company invested in you for the long haul. So, if you want to inspire a brighter work day for everyone, including yourself, you’ve found a match in Workday, and we hope to be a match for you too.

About the Team

The SOX and Internal Controls team works within the accounting and finance organization. We prioritize the development and training of team members so that they become well‑rounded professionals with the skills vital for the next generation. We are committed to working hard and having fun while maintaining work‑life balance.

About the Role

We are seeking a highly motivated and experienced Senior SOX IT Auditor to join our SOX and Internal Controls organization in Pune. This role will lead and execute risk‑based assessments of IT controls supporting financial reporting, helping ensure the design and operating effectiveness of controls across our technology environment. Reporting to the SOX IT Manager, you will partner with Technology, Finance, Accounting, business‑process owners, and external auditors to evaluate IT risks, test controls, support remediation, and drive continuous improvement. You will bring sound judgment, strong technical audit expertise, and a collaborative approach to helping teams build scalable, audit‑ready processes. This role directly supports the organization’s evaluation of internal control over financial reporting. Under SOX Section404, management and external auditors report on the adequacy of those controls. The team’s work includes evaluating controls across system and transaction flows, partnering with technical and business owners on control design, and supporting the testing that informs management’s conclusion on internal controls. For major SOX‑scoped implementations, the team may engage throughout UAT to confirm that testing is satisfactorily completed and documented.

Responsibilities

• Lead end‑to‑end, risk‑based SOX testing for IT general controls, automated application controls, and IT‑dependent manual controls.
• Assess the design and operating effectiveness of controls across logical access, privileged access, change management, system development lifecycle, interfaces, job scheduling, data integrity, and key system configurations.
• Partner with control and system owners to understand end‑to‑end business and technology processes, identify financial‑reporting risks, and define effective control activities.
• Review requirements, solution designs, implementation plans, and evidence for significant changes affecting SOX‑scoped systems and processes.
• Evaluate UAT and associated documentation for SOX‑scoped implementations and significant system changes, where applicable.
• Develop clear test plans, workpapers, evidence requests, testing conclusions, and issue documentation in accordance with internal methodology.
• Communicate control findings, root causes, and practical remediation recommendations to technical and business stakeholders.
• Track remediation plans, validate corrective actions, and elevate risks or delays as appropriate.
• Support quarterly and annual management SOX assessments, including coordination with external auditors.
• Serve as a trusted advisor to stakeholders on control design, documentation, evidence quality, and audit readiness.
• Contribute to continuous improvement through control rationalization, automation, analytics, and enhancements to GRC and audit‑management processes.
• Coach and review the work of junior team members as needed.

About You

Basic Qualifications

• Bachelor’s degree in Information Systems, Computer Science, Accounting, Finance, Audit, or a related discipline.
• 8+ years of progressive experience in IT audit, SOX compliance, internal controls, technology risk, or risk advisory.
• Strong working knowledge of SOX, IT general controls, automated application controls, and IT‑dependent manual controls.

Other Qualifications

• Proven ability to independently manage multiple priorities, deliver high‑quality work on schedule, and exercise sound professional judgment.
• Experience working with ERP, SaaS, cloud, or enterprise business applications is preferred.
• CISA, CIA, CPA, CISSP, or similar professional certification is preferred.
• Curious, detail‑oriented, and pragmatic approach.
• You balance independence with partnership: you can challenge control design and execution constructively while helping owners implement practical solutions.
• Comfortable working through ambiguity, managing a fast‑moving audit calendar, and connecting technology risks to their potential financial‑reporting impact.

Our Approach to Flexible Work

With Flex Work, we’re combining the best of both worlds: in‑person time and remote. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. We know that flexibility can take shape in many ways, so rather than a number of required days in‑office each week, we simply spend at least half (50%) of our time each quarter in the office or in the field with our customers, prospects, and partners (depending on role). This means you’ll have the freedom to create a flexible schedule that caters to your business, team, and personal needs, while being intentional to make the most of time spent together. Those in our remote “home office” roles also have the opportunity to come together in our offices for important moments that matter.

Workday is committed to providing reasonable accommodations for qualified individuals during our application process, in order to perform one or more essential functions of their job, as well as regarding the use of AI tools for employment decision‑making to any degree. Please see below for more details including how to request an accommodation as a qualified veteran, due to a disability or for religious reasons, or as otherwise provided under applicable law. Workday prohibits taking adverse action against any candidate or employee for reporting a possible violation of this policy, requesting one or more work accommodations, exercising a privacy right, or cooperating in an investigation in accordance with applicable law. Any employee who retaliates against a candidate or employee for doing so may be subject to disciplinary action, up to and including termination of employment, to the fullest extent allowable under applicable law. If you require a reasonable accommodation, you may email [e-mail], as far in advance as possible.

Equal Opportunity Workplace

Workday is proud to be an equal opportunity workplace. Individuals seeking employment at Workday are considered without regards to age, ancestry, color, gender (including pregnancy, childbirth, or related medical conditions), gender identity or expression, genetic information, marital status, medical condition, mental or physical disability, national origin, protected family care or medical leave status, race, religion (including beliefs and practices or the absence thereof), sexual orientation, military or veteran status, or any other characteristic protected by federal, state, or local laws. Further, pursuant to applicable local ordinances, Workday will consider for employment qualified applicants with arrest and conviction records.

We do not accept resumes from headhunters, placement agencies, or other suppliers that have not signed a formal agreement with us. You may view the Workday's Pay Transparency Policy, and Know Your Rights Notice, by clicking on their corresponding links.