IT Controls & SOX Manager

Madison-Davis, LLC; San Francisco (CA); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Madison-Davis, LLC is expanding its Internal Audit & Enterprise Risk Advisory practice and seeking an IT Audit / SOX Manager. The role leads technology risk, internal controls, and SOX engagements across a diverse client base, owning projects end-to-end and mentoring teams.

The Manager will leverage AI, data analytics, and emerging risk technologies to improve audit delivery while navigating evolving regulatory requirements and stakeholder expectations.

Qualifications

• 6+ years of experience in IT audit, SOX, technology risk, internal audit, or risk advisory.
• Strong understanding of IT general controls, application controls, SOX, and internal control frameworks.
• Experience leading audit or risk advisory engagements from planning through completion.
• Experience assessing control design and operating effectiveness.

Responsibilities

• Lead IT audit, SOX, and internal controls engagements across a diverse client portfolio.
• Assess IT systems, technology controls, and internal controls for design and operating effectiveness.
• Plan, budget, execute, and complete engagements in accordance with professional standards.
• Evaluate financial reporting risks and identify opportunities to strengthen controls and mitigate risk.
• Develop strategic audit plans aligned with client objectives, risk profiles, and regulatory requirements.
• Support the design, transformation, and implementation of internal audit functions, including co-sourced and outsourced models.
• Leverage AI, data analytics, and visualization tools to enhance audit testing and reporting.
• Lead teams through complex engagements while managing timelines, budgets, deliverables, and client expectations.
• Present audit findings, recommendations, and risk insights to client stakeholders.
• Coach, mentor, and develop junior professionals while providing ongoing performance feedback.

Skills

IT audit

SOX

technology risk

internal audit

risk advisory

team leadership

project management

stakeholder communication

data analytics

AI tools

controls testing

Education

Bachelor's degree in Accounting/Finance/IS/CS

CIA, CISA, CPA or equivalent

Tools

AI-enabled audit tools

Data analytics

GRC/ visualization tools

Job description

A global risk and regulatory advisory firm is expanding its Internal Audit & Enterprise Risk Advisory practice and looking to bring on an IT Audit / SOX Manager. It’s a high-visibility opportunity to help build and advise on internal audit functions while working across technology risk, SOX, and enterprise controls. The role is hybrid with just 1 day/week in office and offers competitive compensation.

Overview

A leading risk and regulatory advisory firm is seeking an experienced IT Audit / SOX Manager to lead technology risk, internal controls, and SOX-related engagements across a diverse client base. This role will assess IT systems and controls, support internal audit transformations, and help organizations strengthen their risk and control environments.

The Manager will own projects from planning through completion, lead client-facing teams, and serve as a trusted advisor to stakeholders. The role also provides an opportunity to leverage AI, data analytics, and emerging risk technologies to improve audit delivery and help clients address evolving technology and regulatory risks.

Responsibilities

• Lead IT audit, SOX, and internal controls engagements across a diverse client portfolio.
• Assess IT systems, technology controls, and internal controls for design and operating effectiveness.
• Plan, budget, execute, and complete engagements in accordance with professional standards.
• Evaluate financial reporting risks and identify opportunities to strengthen controls and mitigate risk.
• Develop strategic audit plans aligned with client objectives, risk profiles, and regulatory requirements.
• Support the design, transformation, and implementation of internal audit functions, including co-sourced and outsourced models.
• Leverage AI, data analytics, and visualization tools to enhance audit testing and reporting.
• Lead teams through complex engagements while managing timelines, budgets, deliverables, and client expectations.
• Present audit findings, recommendations, and risk insights to client stakeholders.
• Coach, mentor, and develop junior professionals while providing ongoing performance feedback.
• Resolve project issues and navigate challenging conversations with clients and team members.
• Maintain compliance with professional, technical, independence, and ethical standards.

Requirements

• 6+ years of experience in IT audit, SOX, technology risk, internal audit, or risk advisory.
• Strong understanding of IT general controls, application controls, SOX, and internal control frameworks.
• Experience leading audit or risk advisory engagements from planning through completion.
• Experience assessing control design, operating effectiveness, and remediation.
• Strong understanding of financial reporting risks and the relationship between business and technology controls.
• Experience managing teams and client relationships in a consulting or professional services environment.
• Strong project management skills, including budgeting, scheduling, and resource management.
• Ability to communicate complex technology and control issues clearly to senior stakeholders.
• Experience with data analytics, AI-enabled audit tools, or other risk technologies preferred.
• Strong analytical, problem-solving, and critical-thinking skills.
• Bachelor's degree in Accounting, Finance, Information Systems, Computer Science, or a related field.
• CIA, CISA, CPA, or other relevant professional certification preferred.