We are looking for an experienced Business Auditor to join a SOX (Sarbanes‑Oxley Act) compliance initiative supporting an Internationalization program. You’ll work closely with the SOX and Internal Audit teams and provide hands‑on support for SOX documentation, control testing, and reporting activities.
The role
The Business Auditor, SOX Compliance will play a critical role in ensuring the company's ongoing compliance with the Sarbanes‑Oxley Act (SOX) Section 404 requirements.
This is a 1‑year fixed‑term contract position focused on the execution and documentation of the SOX compliance program.
The candidate will be responsible for assessing the design and operating effectiveness of internal controls over financial reporting (ICFR), with a specific emphasis on both Business Process Controls and Information Technology General Controls (ITGCs) and IT Application Controls (ITACs).
Key Responsibilities
SOX Compliance and Testing
- Control Execution: Execute the SOX testing plan, including walkthroughs, design effectiveness testing (DET), and operating effectiveness testing (OET) for key financial and operational processes.
- IT Controls Focus: Specifically lead the testing and documentation of IT General Controls (ITGCs) across various domains (e.g., access management, change management, system operations) and IT Application Controls (ITACs) embedded within critical financial systems.
- Documentation: Prepare clear, concise, and well‑supported audit workpapers and documentation in accordance with internal audit standards and external auditor requirements.
- Deficiency Management: Identify control deficiencies, assess their severity, and collaborate with process owners to develop and monitor remediation plans.
- Liaison: Act as a primary liaison between internal process owners, external auditors, and management to facilitate the timely and efficient completion of the SOX program.
Risk Assessment and Advisory
- Risk Scoping: Assist in the annual SOX scoping and risk assessment process, focusing on changes in business processes, systems, and technology that impact ICFR.
- Process Improvement: Provide advisory support to business and IT process owners on control design enhancements, process optimization, and the implementation of new controls.
- Policy Adherence: Ensure all SOX activities adhere to company policies, professional standards, and regulatory guidelines.
Required Qualifications
- Education: Bachelor's degree in Accounting, Finance, Information Systems, or a related field.
- Experience: Minimum of 3‑5 years of experience in public accounting (Big Four preferred), internal audit, or SOX compliance roles.
- Technical Expertise:
- Proven, hands‑on experience with IT General Controls (ITGCs), including logical access, program change management, and computer operations.
- Demonstrated experience in testing and evaluating IT Application Controls (ITACs) within major ERP systems (e.g., SAP, Oracle, NetSuite) or other financial applications.
Preferred Qualifications
- Certifications: Professional certification is highly preferred: Certified Public Accountant (CPA), Certified Internal Auditor (CIA), or Chartered Accountant (CA).
- Skills:
- Strong understanding of COSO 2013 framework and PCAOB auditing standards.
- Excellent written and verbal communication skills, with the ability to translate complex technical issues into business language.
- Experience with audit management software (e.g., AuditBoard, ServiceNow GRC).
- Familiarity with data analytics tools (e.g., ACL, Tableau) for continuous control monitoring.