IT SOX Controls Lead for ICFR & Risk

Amazon; Arlington (VA); On-site; USD 121,000 - 164,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Parental leave

Employee assistance program

Job summary

Amazon is seeking an experienced IT SOX Program Manager to lead the global IT SOX program within GFRC, driving risk-based internal controls across finance and technology. You will work with engineering, finance and audit teams to design, implement and monitor ITGC controls and remediation efforts.

You will oversee policy updates, control design, testing and remediation, ensuring alignment with COSO 2013 and SEC/PCAOB requirements, while coordinating with external auditors and internal

Qualifications

• 5+ years of compliance, audit or risk management experience.
• Bachelor's degree or equivalent.
• Master's degree or equivalent.
• Deep knowledge of IT general controls (ITGCs), including access management, change management, and IT operations.
• Experience with IT SOX scoping, risk assessment, control design, testing, and remediation.
• Understanding of the COSO 2013 framework and SEC/PCAOB regulations as they relate to IT controls.
• Familiarity with ERP systems, databases, and IT infrastructure relevant to financial reporting.
• Experience working with GRC platforms and audit management tools.
• Strong understanding of SDLC controls and system implementation lifecycle.
• Excellent written and verbal communication skills.

Responsibilities

• Execute IT SOX controls strategies and maintain program policies and procedures.
• Deep-dive into IT process areas to define risks and controls for financial reporting.
• Drive continuous improvement of IT SOX program through risk assessments and methodology enhancements.
• Support quarterly 302 sub-certification process and related reporting.
• Assist in evaluating control deficiencies and monitoring remediation efforts.
• Support company-wide ITGC control design and implementation across initiatives.
• Assist with system implementation, migration, and SDLC controls.
• Evaluate control implications for enterprise transformations and platform consolidations.
• Partner with cross-functional teams to embed ITGC requirements in large programs.
• Lead design and implementation of controls with engineering, business and accounting teams.
• Provide ongoing support to process owners and control owners to ensure controls are effective.
• Advise engineering teams on ITGC requirements for access, change and IT operations controls.
• Consult on control solutions balancing compliance with operational efficiency.

Skills

IT general controls (ITGCs)

COSO 2013 framework

SOX compliance experience

Stakeholder collaboration

Change management

Access management

Process improvement

Strong communication

Education

Bachelor's degree or equivalent

Master's degree or equivalent

Tools

GRC platforms

ERP systems

Audit management tools

Databases

Job description

Amazon is seeking an experienced IT SOX Program Manager to lead the global IT SOX program within GFRC, driving risk-based internal controls across finance and technology. You will work with engineering, finance and audit teams to design, implement and monitor ITGC controls and remediation efforts.

You will oversee policy updates, control design, testing and remediation, ensuring alignment with COSO 2013 and SEC/PCAOB requirements, while coordinating with external auditors and internal