Senior Risk Management Professional SOX Controls

Yochana; Plano (TX); On-site; USD 120,000 - 150,000; Full time

Job summary

Yochana seeks a Senior Risk Management Professional to lead and strengthen SOX IT controls across the organization. You will define, design, review, and independently assess control effectiveness, providing governance and remediation guidance to ensure audit readiness.

The role acts as a second line of defense, overseeing control design, testing quality, and KPI attainment for SOX compliance; collaboration with audits and risk teams is essential.

Responsibilities

• Define, design, review, and independently assess SOX IT controls.
• Perform detailed reviews to identify control design gaps or inadequacies.
• Assess Design Effectiveness (DE) to ensure controls address SOX risks.
• Assess Operating Effectiveness (OE) to identify gaps in tooling, automation, or manual processes.

Job description

Job Title: Senior Risk Management Professional SOX Controls, Oversight & Advisory

Job Description:

The Senior Risk Management Professional will be responsible for defining, designing, independently reviewing, and strengthening SOX Information Technology controls across the organization. This role demands deep expertise in SOX control design and operating effectiveness, deficiency management, evidence validation, audit support, and remediation advisory.

The role functions as an independent second line assurance (watch the watchers), providing oversight over control design, execution, testing quality, audit readiness, and ensuring SOX compliance KPIs are strictly met.

Key Responsibilities

SOX Controls Design, Review & Oversight

• Define, design, review, and independently assess SOX Information Technology controls.
• Perform detailed reviews of existing controls to identify:
• Control design gaps or inadequacies
• Misalignment between risks and controls
• Ineffective, redundant, or unsustainable controls
• Evaluate Design Effectiveness (DE) to ensure controls sufficiently address identified SOX risks.
• Assess Operating Effectiveness (OE) to identify:
• Tool, automation, or manual dependency gaps