IT Audit Controls & SOX Senior Manager

Madison-Davis, LLC; San Francisco (CA); On-site; USD 150,000 - 210,000; Full time

Job summary

Madison-Davis, LLC is seeking an experienced IT Audit / SOX Senior Manager to lead technology risk, internal controls, and SOX engagements for a diverse client base in the San Francisco area.

You will own projects from planning through completion, lead client-facing teams, and act as a trusted advisor on controls, risk management, and regulatory compliance, with opportunities to leverage data analytics and AI-enabled auditing tools.

Qualifications

• 6+ years in IT audit, SOX, or risk advisory.
• Strong IT general and application controls knowledge.
• Experience leading engagements from planning to completion.
• Ability to assess control design and remediation.
• Understanding of financial reporting risks and tech controls.
• Experience managing teams and client relationships.
• Proven project management: budgeting and scheduling.
• Bachelor's degree and professional certs preferred.

Responsibilities

• Lead IT audit, SOX, and internal controls engagements.
• Assess IT systems and controls for design and operating effectiveness.
• Plan, budget, execute, and complete engagements per standards.
• Evaluate financial reporting risks and strengthen controls.
• Develop strategic audit plans aligned with client objectives.
• Leverage AI, data analytics, and visualization tools in audits.
• Coach and develop junior professionals.
• Present findings and risk insights to stakeholders.
• Maintain independence and ethical standards.

Skills

IT audit

SOX expertise

Internal controls

Leadership

Project management

Data analytics

AI tools

Client management

Communication

Education

Bachelor's degree in Accounting/Finance/IS/CS

Tools

Audit software

Data analytics tools

Visualization tools

Job description

A leading risk and regulatory advisory firm is seeking an experienced IT Audit / SOX Senior Manager to lead technology risk, internal controls, and SOX-related engagements across a diverse client base. This role will assess IT systems and controls, support internal audit transformations, and help organizations strengthen their risk and control environments.

The Senior Manager will own projects from planning through completion, lead client-facing teams, and serve as a trusted advisor to stakeholders. The role also provides an opportunity to leverage AI, data analytics, and emerging risk technologies to improve audit delivery and help clients address evolving technology and regulatory risks.

Responsibilities

• Lead IT audit, SOX, and internal controls engagements across a diverse client portfolio.
• Assess IT systems, technology controls, and internal controls for design and operating effectiveness.
• Plan, budget, execute, and complete engagements in accordance with professional standards.
• Evaluate financial reporting risks and identify opportunities to strengthen controls and mitigate risk.
• Develop strategic audit plans aligned with client objectives, risk profiles, and regulatory requirements.
• Support the design, transformation, and implementation of internal audit functions, including co-sourced and outsourced models.
• Leverage AI, data analytics, and visualization tools to enhance audit testing and reporting.
• Lead teams through complex engagements while managing timelines, budgets, deliverables, and client expectations.
• Present audit findings, recommendations, and risk insights to client stakeholders.
• Coach, mentor, and develop junior professionals while providing ongoing performance feedback.
• Resolve project issues and navigate challenging conversations with clients and team members.
• Maintain compliance with professional, technical, independence, and ethical standards.

Requirements

• 6+ years of experience in IT audit, SOX, technology risk, internal audit, or risk advisory.
• Strong understanding of IT general controls, application controls, SOX, and internal control frameworks.
• Experience leading audit or risk advisory engagements from planning through completion.
• Experience assessing control design, operating effectiveness, and remediation.
• Strong understanding of financial reporting risks and the relationship between business and technology controls.
• Experience managing teams and client relationships in a consulting or professional services environment.
• Strong project management skills, including budgeting, scheduling, and resource management.
• Ability to communicate complex technology and control issues clearly to senior stakeholders.
• Experience with data analytics, AI-enabled audit tools, or other risk technologies preferred.
• Strong analytical, problem-solving, and critical-thinking skills.
• Bachelor's degree in Accounting, Finance, Information Systems, Computer Science, or a related field.
• CIA, CISA, CPA, or other relevant professional certification preferred.