Sarbanes-Oxley (SOX) Governance Consultant

Truist; Raleigh (NC); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical insurance

401k plan

Paid time off

Job summary

Truist seeks a seasoned professional to join the Technology, Data, and Operations (TD&O) SOX Governance team. You will coordinate audit requests, partner with process owners, and support audit readiness across TD&O.

The role requires governance expertise, strong communication with auditors and leadership, and openness to leveraging AI-enabled capabilities to enhance efficiency and control effectiveness.

Qualifications

• Bachelor’s degree in IT, Information Security, Engineering, or related field.
• Minimum of 5 years of professional experience in technology governance.
• Knowledge of regulatory requirements and compliance frameworks.
• Experience applying governance assessment methodologies and control frameworks.

Responsibilities

• Demonstrate knowledge of SOX IT general controls and manage audit requests.
• Coordinate with auditors and stakeholders to support audit readiness.
• Advise business and technology partners on IT controls and risk.
• Document SOX issues and remediation plans, monitor progress.
• Identify opportunities to streamline and automate SOX governance processes.

Skills

SOX ITGC

Audit coordination

Regulatory knowledge

Stakeholder communication

Automation opportunities

IT risk assessment

Microsoft Office 365

Education

Bachelor’s degree in IT/InfoSec/Engineering

Master’s degree in related field

Tools

Excel

PowerPoint

SharePoint

Teams

Job description

Need Help?

If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).

Regular or Temporary

Regular

Language Fluency

English (Required)

Work Shift

1st shift (United States of America)

Please review the following job description

In this role, you will serve as a member of the Technology, Data, and Operations (TD&O) Sarbanes-Oxley (SOX) Governance team, supporting Truist’s TD&O business unit in meeting requirements under Sections 404 and 302 of the Sarbanes-Oxley Act of 2002 and the Federal Deposit Insurance Corporation Improvement Act of 1991.

TD&O SOX Governance teammates serve as subject matter experts for SOX IT general controls and act as primary liaisons across TD&O leadership, process and control owners, SOX Program Management (SPM), the Business Execution and Risk Organization (BERO), and internal and external auditors. This role is responsible for coordinating SOX audit-related activities, managing and tracking audit requests, supporting audit readiness, and partnering with TD&O stakeholders to help ensure timely, accurate, and well-supported audit execution. The role also requires openness to learning and responsibly embedding AI-enabled capabilities and identifying automation opportunities to improve the efficiency, consistency, and sustainability of SOX governance processes.

Role expectations and accountabilities (other duties may be assigned as business needs evolve)

• Demonstrate knowledge of SOX IT general controls and coordinate with internal and external auditors to manage audit requests, track deliverables, and support timely, accurate audit execution.
• Partner with TD&O process and control owners, SOX Program Management, BERO, auditors, and other risk partners to support audit readiness, resolve request-related issues, and promote consistent SOX governance routines.
• Apply technology risk, IT control, and TD&O operational knowledge to evaluate SOX-related matters, advise business and technology partners, and identify practical, risk-informed solutions.
• Support documentation of SOX issues, development of remediation plans, and monitoring of remediation activities through timely resolution.
• Identify responsible opportunities to streamline, automate, and enhance SOX governance activities, reporting, audit request management, and related control support processes, including through appropriate use of AI-enabled capabilities.

Essential Duties And Responsibilities

• Identifies, assesses, and mitigates technology-related risks to maintain compliance with regulatory requirements and internal policies.
• Implements and monitors governance processes, controls, and procedures to manage technology risks effectively.
• Conducts governance analysis, vulnerability assessments, and/or control testing to protect critical technology infrastructure and data.
• Provides detailed reporting on technology risk posture and compliance status to internal stakeholders.
• Manages and supports technology governance projects and assignments while collaborating with cross‑functional teams to ensure controls are integrated into technology projects and operations.
• May support audits or remediation activities by preparing documentation and responding to inquiries related to technology governance.
• Maintains awareness of industry best practices, regulatory changes, and evolving risk landscapes to update governance strategies.

Qualifications

Required Qualifications

• Bachelor’s degree in Information Technology, Information Security, Engineering, or related field.
• Minimum of 5 years of professional experience in technology governance.
• Knowledge of regulatory requirements and compliance frameworks.
• Experience applying governance assessment methodologies and control frameworks.

Preferred Qualifications

• Master’s degree in Accounting, Finance, Information Technology, Information Systems, Cybersecurity, or a related field, or equivalent education and related training.
• Five or more years of experience performing, overseeing, or managing IT components of SOX audits, including IT general controls, automated controls, key reports, and audit evidence management.
• Experience working with internal audit, external audit, SOX program management, technology control owners, and risk partners to support audit execution, issue remediation, and control readiness.
• Strong understanding of technology risk, IT governance, change management, access management, SDLC, cybersecurity, infrastructure, cloud, and data-related control environments.
• Experience managing audit requests, tracking deliverables, monitoring remediation activities, and communicating status, risks, and escalations to stakeholders and leadership.
• Proficiency with Microsoft Office and Microsoft 365 collaboration and workflow tools, including Excel, PowerPoint, Word, Teams, SharePoint, and related reporting or automation capabilities.
• Relevant professional certification, such as CISA, CRISC, CISSP, CISM, CPA, CIA, or similar credential.

General Description of Available Benefits for Eligible Employees of Truist Financial Corporation

• Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates.
• Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays.
• For more details on Truist’s generous benefit plans, please visit our Benefits site.
• Depending on the position and division, this job may also be eligible for Truist’s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan.
• As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.

Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.

EEO is the Law E-Verify IER Right to Work