IT SOX & Controls Lead

Amazon; Boston (MA); On-site; USD 121,000 - 164,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Parental leave

Job summary

Amazon is seeking an IT SOX Program Manager to lead the IT SOX program within GFRC, focusing on control design, implementation, and ongoing assurance of ITGCs across the enterprise. The role emphasizes collaboration with engineering, accounting, and business teams to strengthen ICFR and adapt to a fast-paced, high-growth environment.

Requirements include 5+ years in compliance/audit/risk, COSO 2013 knowledge, and strong ITGC expertise. Experience with ERP systems and GRC platforms is preferred.

Qualifications

• 5+ years of compliance, audit or risk management experience.
• Bachelor's degree or equivalent.
• Deep knowledge of COSO 2013 framework and SEC/PCAOB regulations.
• Experience with IT general controls (ITGCs) including access management and change management.
• Ability to design and monitor a global internal control environment.

Responsibilities

• Execute IT SOX control strategies and improve program policies.
• Lead IT process risk and controls to address financial reporting risk.
• Drive continuous improvement through risk assessments and method updates.
• Support the 302 sub-certification and related reporting.
• Collaborate with cross-functional teams to embed ITGC requirements.

Skills

ITSOX

COSO 2013

SOX compliance

Auditing

Stakeholder collaboration

Education

Bachelor's degree or equivalent

Master's degree

Tools

GRC platforms

ERP systems

Job description

Amazon is seeking an IT SOX Program Manager to lead the IT SOX program within GFRC, focusing on control design, implementation, and ongoing assurance of ITGCs across the enterprise. The role emphasizes collaboration with engineering, accounting, and business teams to strengthen ICFR and adapt to a fast-paced, high-growth environment.

Requirements include 5+ years in compliance/audit/risk, COSO 2013 knowledge, and strong ITGC expertise. Experience with ERP systems and GRC platforms is preferred.