Job Title: IT Audit Manager (SOX)
Industry: Technology
Location: Palo Alto, CA
Client Overview
Our client is a publicly traded data security software company headquartered in Silicon Valley, serving enterprises worldwide with backup, recovery, and cyber resilience solutions. This role sits within the Internal Audit team and supports the company's Sarbanes-Oxley compliance program during a 6-month engagement.
Top 3 Skills
- SOX IT General Controls (ITGC) testing across logical access, change management, computer operations, and SDLC
- IT Application Controls (ITAC) and key report (IPE) testing, including completeness and accuracy validation
- Identity governance and access control auditing, including provisioning, deprovisioning, and user access reviews
What You'll Do
- Assess IT risk for new AI tools and systems, recommend audit scope, and design ITGCs and ITACs for them
- Audit identity governance workflows for access provisioning, deprovisioning, and user access reviews, and validate data synced from source systems
- Execute ITGC testing across logical access, change management, computer operations, and SDLC
- Design and run ITAC testing on input, interface, processing, and output controls for key financial systems
- Test key reports for logic, parameters, completeness, and accuracy
- Lead system walkthroughs with IT and business process owners to assess control design and identify gaps
- Track control deficiencies, work with control owners on remediation, and validate closure with evidence
- Prepare and maintain audit-ready work papers that meet internal and external audit standards
- Partner with external auditors throughout testing cycles
- Support additional internal and operational audit projects as assigned
What We Need From You
- Bachelor's degree in Information Systems, Computer Science, or a related field
- 8+ years of IT audit experience at a Big 4 firm, major consulting firm, or internal audit function
- Hands-on experience designing and executing SOX ITGC and ITAC test procedures across multiple platforms and financial applications
- Proven key report testing experience in a SOX environment
- Experience leading walkthroughs and supporting remediation with control owners and external auditors
Preferred / Bonus
- SaaS or high-growth technology company experience
- Experience assessing AI tools and designing controls for new systems
- Familiarity with COSO and emerging AI governance frameworks within a SOX program
- SailPoint Identity Governance audit experience
- AuditBoard or similar GRC platform experience
- Quote-to-cash process experience
- Process and data flow diagramming in Lucidchart or similar tools
- CISA, CISSP, or equivalent certification