Senior Manager, Internal Controls

FormFactor Inc.; Oregon; On-site; USD 132,000 - 174,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401(k) with company match

Employee Stock Purchase Plan (ESPP)

Paid time off

Profit-sharing bonuses

Flexible spending accounts

Job summary

FormFactor, Inc. in Beaverton, OR, seeks a Senior Manager of Internal Controls to lead global SOX compliance, internal audit programs, and enterprise risk management.

You will partner with Finance, IT, Operations and Engineering to strengthen control environments and reporting accuracy. The role requires deep experience in COSO, ICFR, and ITGC, with a track record of audit leadership in a public company and collaboration with external auditors.

Qualifications

• Experience leading internal audit and SOX programs in a public company.
• Strong COSO, ICFR, and ITGC knowledge.
• Develop and execute risk-based internal audit plans and oversee corrective actions.
• Communicate audit results to Audit Committee and leadership.
• Operate across a global, matrixed organization in a high-technology environment.

Responsibilities

• Lead global SOX compliance program including planning, testing, remediation and certification.
• Maintain internal controls over financial reporting with process owners.
• Coordinate with stakeholders and external auditors for efficient audits.
• Evaluate deficiencies and monitor remediation until closure.
• Develop risk-based internal audit plans covering multiple domains.
• Communicate results to leaders and the Audit Committee.
• Lead enterprise risk assessments and dashboards for oversight.
• Develop and mentor the internal controls team.

Skills

SOX Compliance

Internal Audit

COSO Framework

Data Analytics

ITGC

Executive Communications

Training & Development

Education

Bachelor’s degree or higher

Tools

Oracle Applications

Workday

SAP

Job description

Forming Our Future together

FormFactor, Inc. (NASDAQ: FORM), is a leading provider of essential test and measurement technologies along the full semiconductor product life cycle — from characterization, modeling, reliability, and design de-bug, to qualification and production test. Semiconductor companies rely upon FormFactor’s products and services to accelerate profitability by optimizing device performance and advancing yield knowledge. The company serves customers through its network of facilities in Asia, Europe, and North America.

Rooted in our core values — Focus on the Customer, Ownership & Accountability, Respectfully & Effectively Communicate, and Motivate & Develop People — we foster an environment where diverse perspectives are not only welcomed but celebrated. Everyone can make an impact here. Whether it’s improving products, supporting customers, or positively influencing peers and the community, the contributions of our people matter.

Shift:

The regular hours for this position are day shift.

Job Description:

The Senior Manager, Internal Controls leads FormFactor’s global internal controls, Sarbanes‑Oxley compliance, and internal audit programs. The position is responsible for assessing financial, operational, compliance, and information technology risks; evaluating the effectiveness of related controls; and providing practical recommendations that strengthen the Company’s control environment and business processes.

This role reports administratively through the Finance function and has a direct reporting line to the Audit Committee Chair. The Senior Manager works closely with the Audit Committee, executive leadership, external auditors, and leaders across Finance, Information Technology, Operations, Supply Chain, Engineering, Human Resources, and other business functions.

Operating within a complex, global semiconductor manufacturing environment, the Senior Manager helps safeguard Company assets, support reliable financial reporting and regulatory compliance, improve operational effectiveness, and manage business risk. The position also serves as a risk and controls advisor for acquisitions, manufacturing expansion, automation, new technology introductions, and enterprise system implementations.

KEY RESPONSIBILITIES

SOX Compliance and Financial Controls

• Lead the Company’s global Sarbanes‑Oxley compliance program, including annual planning, risk assessment, scoping, documentation, testing, deficiency evaluation, remediation, and certification.
• Partner with Finance, Information Technology, and business process owners to maintain effective internal controls over financial reporting.
• Establish clear accountability for control ownership, execution, documentation, and remediation.
• Coordinate with internal stakeholders and external auditors to support effective and efficient audit execution.
• Evaluate control deficiencies, advise process owners on sustainable corrective actions, and monitor remediation through completion.
• Monitor relevant regulatory and professional developments and assess their impact on the Company’s control environment.
• Provide quarterly SOX compliance and internal controls updates to executive leadership and the Audit Committee.

Operational Audits and Process Improvement

• Develop and execute a risk-based internal audit plan covering financial, operational, compliance, and information technology risks.
• Conduct audits and advisory reviews across areas such as inventory management, production planning, engineering change control, procurement, warehouse operations, asset management, accounting operations, and information technology.
• Evaluate the design and effectiveness of business processes and controls, identify root causes, and recommend practical improvements.
• Communicate audit results to business leaders, executive leadership, and the Audit Committee, including the associated risks and agreed-upon corrective actions.
• Monitor remediation activities and report the status of significant findings through completion.
• Identify recurring or enterprise-wide issues and recommend improvements to strengthen governance, controls, and operational effectiveness.
• Maintain the independence, objectivity, and credibility of the internal audit function.

Enterprise Risk Management

• Lead or facilitate enterprise risk assessments, including the identification, evaluation, prioritization, and monitoring of significant business risks.
• Partner with business and functional leaders to establish risk mitigation plans with clear ownership and accountability.
• Develop risk reports and dashboards that support leadership and Audit Committee oversight.
• Monitor significant risk mitigation activities and assess whether corrective actions appropriately address identified risks.
• Support the integration of risk considerations into strategic planning and significant business decisions.

Leadership & Organizational Development

• Lead and develop the internal controls and internal audit team.
• Establish departmental objectives, priorities, operating practices, and performance expectations.
• Recruit, coach, and develop team members while building the capabilities needed to support the Company’s evolving risk environment.
• Maintain appropriate development, succession, and knowledge‑retention plans.
• Build effective relationships across functions, business units, and geographic locations.
• Manage external resources and service providers, as applicable.

PREFERRED SKILLS

• CPA, CIA, CISA, CRMA, or comparable professional certification is preferred.
• Demonstrated experience leading or significantly managing internal audit and SOX compliance programs within a publicly traded company.
• Strong knowledge of the COSO framework, internal controls over financial reporting (ICFR), and information technology general controls (ITGC).
• Experience developing and executing risk-based internal audit plans; evaluating financial, operational, compliance, and technology risks; and overseeing corrective actions.
• Ability to assess complex processes and controls, identify root causes, and develop practical recommendations that balance risk management with business objectives.
• Demonstrated ability to communicate effectively with the Audit Committee, executive leadership, business partners, and external auditors.
• Experience with Oracle, Workday, SAP, or comparable enterprise platforms.
• Experience using automation, analytics, or continuous monitoring to improve audit coverage and control oversight.
• Experience working across functions and global locations in a complex, matrixed organization.
• Experience in semiconductor, electronics, advanced manufacturing, or another high‑technology industry is preferred.

Skills: Automation, Business Process Improvements, COSO Framework, Data Analytics, Enterprise Data Warehousing (EDW), Executive Communications, Information Technology General Controls (ITGC), Internal Audit Management, Internal Control Over Financial Reporting (IFCR), Manufacturing Processes, Oracle Applications, Risk Assessments, Root Cause Analysis (RCA), Sarbanes‑Oxley Compliance, Training and Development, Workday HCM

Education & Experience:

Minimum of 10 years of related experience with a Bachelor’s degree; or 8 years and a Master’s degree; or a PhD with 5 years experience; or equivalent work experience| Required

Pay Range:

$132,400.00 - $173,775.00

Pay Range Explained:

This role in Beaverton, Oregon pays between $132,400.00 and $173,775.00 per year, depending on your experience, skills, and background. Pay may vary in other locations. We offer a full benefits package, including medical, dental, vision, life insurance, disability coverage, a 401(k) with company match, employee stock purchase plan (ESPP), and paid time off. You’ll also be eligible for quarterly profit‑sharing bonuses and flexible spending or savings accounts.

Equal Employment Opportunity Statement

FormFactor is an equal opportunity employer. FormFactor complies with all national, state, and local laws that seek to promote equal opportunities for any applicant or employee without regard to age, race, color, gender, gender identity/expression, national origin, sexual orientation, religion, disability, marital status, pregnancy or related condition, military service, or any other legally protected characteristics. These protections apply to all aspects of employment, including but not limited to, recruitment, hiring, training, promotions, and compensation.

For roles that are designated as remote‑eligible, employees cannot be located in: AL, AK, AR, DE, GA, HI, IL, IA, KY, LA, ME, MD, MS, MO, NE, NV, NJ, NM, ND, OK, PA, RI, SC, SD, TN, WV, WI, WY. This list is continuously evolving and being updated, please check back with us if the state you live in is on the exclusion list. A role is remote‑eligible only when it is listed as “Remote” in the job location.