Associate Manager, IT SOX, Audits

Jobtailor; Cambridge (MA); On-site; USD 120,000 - 180,000; Full time

Job summary

Jobtailor is seeking a senior IT audit professional to lead ITGC SOX testing, coordinate with external auditors, and guide junior staff. You will validate evidence, assess control design and operating effectiveness, and drive remediation planning in a Life Sciences context.

Applicants should have 3-5 years of IT risk and SOX experience, with strong communication skills and a preference for Big Four consulting backgrounds. E-Verify in the U.S. is required.

Qualifications

• 3-5 years of experience in IT audit, IT SOX compliance, or IT risk advisory.
• Strong working knowledge of IT General Controls (ITGC) and SOX 404 requirements.
• Experience planning, executing, and reviewing ITGC testing.
• Proven ability to manage relationships with External Auditors and cross-functional stakeholders.
• Ability to oversee and review work performed by junior resources.
• Strong written and verbal communication skills, including interaction with senior IT and Finance leadership.
• Consulting, Big Four experience preferred.
• Life Sciences industry experience preferred.
• Professional certifications preferred – CISA, CISM, CISSP, CRISC, CIA.
• E-Verify Employer in the United States

Responsibilities

• Lead end-to-end ITGC testing engagements across multiple projects.
• Coordinate walkthroughs, testing schedules, and evidence requests with stakeholders.
• Escalate risks, control issues, and execution challenges to management.
• Review and validate ITGC documentation, evidence, and testing conclusions.
• Provide guidance on testing approach, documentation standards, and evidence expectations.
• Mentor and review work performed by junior resources and Co-Ops.

Skills

ITGC Testing

Risk Assessment

Control Deficiency Identification

Documentation Review

Testing Methodologies

Root Cause Analysis

Evidence Validation

Change Management

Logical Access Testing

IT Operations Testing

Education

Bachelor’s degree in Information Systems, Computer Science, Accounting, or a related field

Job description

• Lead end-to-end execution of ITGC SOX testing, including planning, walkthroughs, test of design, and test of operating effectiveness
• Test controls across Logical Access, Change Management, and IT Operations
• Execute ITGC testing on behalf of management in alignment with SOX 404 requirements and external audit expectations
• Review and validate ITGC documentation, evidence, and testing conclusions
• Identify control deficiencies, assess impact, and support root cause analysis and remediation planning
• Serve as primary point of contact for ITGC-related interactions with IT Risk Management, SOX PMO, and External Auditors
• Coordinate walkthroughs, testing schedules, and evidence requests
• Escalate risks, control issues, and execution challenges
• Manage, coach, and review work performed by Co-Ops or junior staff
• Provide guidance on testing approach, documentation standards, and evidence expectations
• Ensure consistent testing methodologies and adherence to SOX timelines
• Identify process improvements within ITGC SOX testing
• Support ITGC scoping, risk assessments, and testing approaches in response to system changes or emerging risks
• Maintain awareness of evolving SOX and ITGC expectations and incorporate leading practices
• During non-peak SOX periods, support IT audits, integrated audits, targeted risk assessments, advisory reviews, and Internal Audit initiatives

Requirements

• 3-5 years of experience in IT audit, IT SOX compliance, or IT risk advisory
• Strong working knowledge of IT General Controls (ITGC) and SOX 404 requirements
• Experience planning, executing, and reviewing ITGC testing
• Proven ability to manage relationships with External Auditors and cross-functional stakeholders
• Ability to oversee and review work performed by junior resources
• Strong written and verbal communication skills, including interaction with senior IT and Finance leadership
• Bachelor’s degree in Information Systems, Computer Science, Accounting, or a related field
• Consulting, Big Four experience preferred
• Life Sciences industry experience preferred
• Professional certifications preferred – CISA, CISM, CISSP, CRISC, CIA
• E-Verify Employer in the United States

Core Competencies

Demonstrates expertise in IT General Controls (ITGC) and SOX 404 compliance, with a strong focus on testing methodologies, risk assessments, and stakeholder management. Proven ability to lead IT audit initiatives and mentor junior staff while ensuring adherence to regulatory standards.

Highest-signal resume keywords

• IT General Controls (ITGC)
• SOX 404 Compliance
• IT Audit Experience
• CISA Certification
• Stakeholder Management

Hard Skills

• ITGC Testing
• Risk Assessment
• Control Deficiency Identification
• Documentation Review
• Testing Methodologies
• Root Cause Analysis
• Evidence Validation
• Change Management
• Logical Access Testing
• IT Operations Testing

Soft Skills

• Strong Communication Skills
• Relationship Management
• Coaching and Mentoring

Certifications & Qualifications

• CISA
• CISM
• CISSP
• CRISC
• CIA

Industry Keywords

• IT Risk Advisory
• Life Sciences Industry
• Big Four Experience
• External Audit
• SOX PMO