Senior Internal Auditor - SOX, GRC & AI-Driven Controls

States Manufacturing LLC; Dayton (MN); Hybrid; USD 110,000 - 150,000; Full time

Job summary

States Manufacturing LLC seeks a Senior Internal Auditor to support the internal audit function and SOX 404 compliance in a newly public environment. The role focuses on building and executing a scalable internal control framework, leveraging a GRC tool for documentation, testing, certification, and issue tracking.

The position also provides exposure to enterprise risk management (ERM) and enterprise-wide process transformation initiatives, with opportunities to contribute across finance and

Qualifications

• CPA required.
• 35+ years of experience in internal audit, SOX, or public accounting.
• Strong understanding of SOX 404 and COSO framework.
• Experience with Workiva or similar GRC tool.
• Big 4 experience preferred; ITGC exposure is a plus.

Responsibilities

• Execute key components of the SOX 404 program, including risk assessment, RCM development, walkthroughs, and control testing
• Identify control deficiencies, perform root cause analysis, and track remediation efforts
• Maintain SOX documentation, testing results, and certifications
• Coordinate with external auditors to support integrated audit requirements
• Support implementation of an ERM framework, including risk identification and reporting
• Perform risk-based internal audits and operational reviews
• Identify and drive process improvement and transformation opportunities across finance and operations
• Leverage and support the implementation of AI tools and analytics to enhance risk assessment, testing coverage, and process flow documentation

Skills

SOX 404

COSO framework

Risk assessment

Root cause analysis

Process improvement

GRC tooling

External audit coordination

Education

Bachelor's degree in accounting/finance

Tools

Workiva or similar GRC tool

Job description

States Manufacturing LLC seeks a Senior Internal Auditor to support the internal audit function and SOX 404 compliance in a newly public environment. The role focuses on building and executing a scalable internal control framework, leveraging a GRC tool for documentation, testing, certification, and issue tracking.

The position also provides exposure to enterprise risk management (ERM) and enterprise-wide process transformation initiatives, with opportunities to contribute across finance and