Senior Manager, SOX IT Compliance

papajohns; Atlanta (GA); Remote; USD 130,000 - 180,000; Full time

Job summary

Papa John's is seeking a Senior Manager of IT SOX Compliance to lead the enterprise-wide IT SOX program, advising on governance, risk assessment, control design, and remediation with Internal Audit and external auditors. The role emphasizes ownership of program risk, documentation, and strong collaboration across IT and Finance.

The candidate will oversee RCMS, SDLC considerations, IT general controls, and SOC reporting, while guiding teams in multiple locations and supporting automation

Qualifications

• Bachelor's degree in Information Systems, Accounting, Finance, or related field.
• 8+ years of IT SOX, IT audit, or risk management experience.
• Strong knowledge of SOX 404, COSO, COBIT, PCAOB standards.
• Experience with ITGCs, control design, and remediation processes.
• Ability to travel 15–20% annually and work across locations.

Responsibilities

• Lead enterprise IT SOX compliance program and governance activities.
• Provide risk-based oversight of control design and scoping during SOX work.
• Coordinate with control owners, Internal Audit, and external auditors.
• Maintain SOX documentation including RCMS and data/process flows.
• Support training and guidance for process owners on IT controls.
• Facilitate remediation and retesting readiness with stakeholders.
• Support automation and continuous control monitoring initiatives.
• Review SOC 1 reports and assess reliance on third-party controls.
• Prepare status reports for boards and executive committees.

Skills

SOX knowledge

Analytical thinking

Project management

Risk assessment

Communication

Cross-functional collaboration

Education

Bachelor's degree in Information Systems/Accounting/Finance

CISA

CISSP

CISM

CRISC

Tools

AuditBoard

Job description

What's Unique About You Is What Makes Us Better! Diversity is our strength and competitive advantage. Bring your flavor to the Papa John's team today!

SUMMARY

As Senior Manager of IT SOX Compliance, you will lead the enterprise-wide IT SOX compliance program, reporting to the Director of SOX Compliance - with a focus on governance, risk assessment, control design evaluation, and program oversight. Our SOX team does not perform control testing, so this role serves in an advisory capacity centered around program ownership, risk and control design oversight, coordination with control owners, facilitation of remediation, training, and partnership with Internal Audit and external auditors.

ESSENTIAL DUTIES AND RESPONSIBILITIES

Lead the company's IT SOX compliance program, ensuring that financial reporting risks tied to technology and data are appropriately mitigated.

Provide thought leadership on new business initiatives, system implementations along with system development life cycle controls (SDLC's), IT policy changes, personnel changes, assessing the impact to the SOX compliance program, and advising the business accordingly.

Conduct and update risk assessments and scoping, especially around systems supporting financial reporting, revenue recognition, etc.

Partner with cross-functional stakeholders in IT, Finance, and Internal Audit to maintain strong control design and accountability.

Maintain and oversee SOX documentation, including risk and control matrices (RCMs), process and data flows, system diagrams, etc.

Support process owners through training, reviewing, and providing guidance for their processes including, but not limited to, IT General Controls, IT Operations and SOC Reporting.

Facilitate the deficiency management and remediation process, from root cause analysis to retesting readiness.

Support the implementation of automation and continuous control monitoring as part of control enhancement efforts.

Manage review of SOC Reports and mapping to complementary user entity controls (CUEC's)

Track and communicate program status, issues, and risks to the Director of SOX Compliance, including preparation of reports for the SOX Steering Committee and Audit Committee.

Monitor emerging risks in IT compliance, including cybersecurity threats that could impact SOX controls.

Other duties may be assigned.

DESIRED FUNCTIONAL SKILLS

A team player and process-oriented focus with excellent interpersonal, analytical, and problem-solving skills.

Exhibit critical thinking skills and ability to complete tasks with appropriate level of skepticism.

Proficiency in annual and rolling SOX scoping based on risk factors and materiality.

Deep understanding of ITGCs.

Competence in identifying and assessing application controls, key reports, and interface controls.

Skilled in documenting IT processes, process and data flows, and risk and control matrices (RCMs).

Strong project management capabilities for handling timelines, milestones, and dependencies.

Familiarity with ERP systems (e.g., Oracle Cloud, NetSuite, PeopleSoft).

Ability to review SOC 1 reports and assess reliance on third-party controls.

Able to translate complex IT and control concepts into business-friendly language.

Experience with audit software like AuditBoard is a plus.

Ability to travel 15 - 20% on average annually.

Ability to work remotely with team members in multiple locations.

undefined

DESIRED EDUCATION, EXPERIENCE AND CERTIFICATIONS

Bachelor's degree in Information Systems, Accounting, Finance, or related field.

Relevant professional certification is preferred, such as Certified Information Systems Auditor (CISA), Certified information systems security professional (CISSP), Certified Information Security Manager (CISM), Certified in Risk and Information Security Controls (CRISC).

8+ years of relevant experience, including IT SOX, IT audit, or risk management at a public company or Big 4/public accounting firm.

Strong understanding of SOX 404, COSO, COBIT, and PCAOB standards.

Our Values

EVERYONE BELONGS - We believe connectedness and belonging are the essential ingredients to our success

DO THE RIGHT THING - We are relentlessly focused on quality and integrity and make the right choices, even when it's difficult

PEOPLE FIRST - To craft positive experiences for our customers, we take care of each other first

INNOVATE TO WIN - We champion and challenge for a better way in all we do

HAVE FUN - We find joy, create meaningful impact and celebrate the journey together

Our Core Competencies

CUSTOMER CENTRIC - We leverage data and insights to craft a customer experience that builds relationships, cultivates trust, and delivers excellence

RESULTS DRIVEN - We focus on measurable outcomes by remaining optimistic, tenacious, and persistent even in the face of challenges

CONTINUOUS IMPROVEMENT - We champion for better through strategic risk taking, experimentation and challenging the status quo

BIAS FOR ACTION - We courageously lead, drive towards decisions, a