Senior SOX Analyst

SmartRecruiters, Inc.; Grand Rapids (MI); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Competitive wages

Hybrid work schedule

Continuous learning

Inclusive culture

Meaningful impact

Job summary

Steelcase in Grand Rapids, MI, is seeking an experienced IT risk and compliance professional to lead the maintenance and testing of IT controls, including SOX and ICFR, across a complex enterprise. The role partners with IT, Security, Finance, Legal, and Audit to strengthen risk posture and enable business objectives.

You will conduct risk assessments, manage third-party risk, and drive governance programs while communicating findings to leadership and mentoring peers.

Qualifications

• Bachelor's degree or equivalent experience in a related field.
• 5+ years in information systems audit, IT risk assurance, or related.
• Experience supporting SOX, ICFR, and PCAOB standards.
• Experience designing and testing IT controls in complex environments.
• Knowledge of SOX, NIST CSF, COBIT, GDPR, CCPA.
• Strong communication and analytical skills.
• Ability to explain technical concepts to non-technical audiences.

Responsibilities

• Lead the maintenance and execution of IT controls and compliance programs.
• Own and coordinate SOX, GITCs, data privacy, and third-party risk activities.
• Serve as liaison between IT, business stakeholders and audit partners.
• Conduct risk assessments, policy reviews, and vendor evaluations.
• Maintain and enhance the enterprise IT risk register.
• Communicate risk and control issues to leadership with action plans.
• Work with control owners to ensure controls are designed and tested.
• Manage workflows in GRC platforms for controls, risk, privacy, and audit.
• Support employee compliance awareness and training initiatives.
• Provide thought leadership to advance governance maturity.
• Mentor peers and build organizational capability.

Skills

Analytical thinking

Communication skills

Stakeholder management

Problem solving

SQL knowledge

MS Office (Word/Excel)

Education

Bachelor's degree in Computer Science, Information Systems, Finance, or related field

Tools

GRC platforms

Audit software

Cloud technologies

Job description

You understand that effective governance and compliance are not about checking boxes. They are about helping the business manage risk, build trust, and achieve its objectives with confidence.

You are comfortable navigating complex regulatory requirements, IT controls, audits, and risk frameworks, but you never lose sight of the people and business processes behind them. You know how to translate technical and compliance concepts into practical actions that stakeholders can understand and adopt.

You are a proactive problem solver who enjoys identifying risks before they become issues, strengthening control environments, and helping teams continuously improve. Whether you are evaluating the effectiveness of a SOX control, conducting a risk assessment, overseeing governance workflows, or working with audit partners, you bring a thoughtful, collaborative approach.

You enjoy partnering across IT, Security, Finance, Legal, Privacy, and business teams to create compliance programs that are effective, sustainable, and aligned with business priorities.

• Offering competitive wages and benefits that support your life both in and out of work.
• Providing a flexible hybrid work schedule, meaning we expect the office to be your primary place of work, balanced with choice and control.
• Creating continuous learning opportunities to help you grow and advance your expertise.
• Fostering a culture of inclusion where employees feel seen, heard, and valued, and living it out every day.
• Empowering you to make a meaningful impact through your work and our ongoing commitment to innovation, integrity, and continuous improvement.

You'll Support Meaningful Work By:

• Leading the maintenance and execution of IT controls and compliance programs to meet regulatory requirements, improve risk posture, and support strategic initiatives.
• Owning and coordinating activities related to SOX compliance, General IT Controls (GITCs), Data Privacy requirements, and third-party risk management.
• Serving as a primary liaison between IT, business stakeholders, and internal and external audit partners to support audit, risk, and compliance activities.
• Conducting risk assessments, including framework assessments, policy and procedure reviews, operational reviews, vendor evaluations, contract reviews, and audit activities.
• Maintaining and enhancing the enterprise IT risk register, identifying emerging risks, recommending mitigation strategies, and tracking remediation efforts.
• Communicating risk, compliance, and control issues to leadership while helping develop action plans to address identified gaps.
• Working with control owners to ensure controls are appropriately designed, documented, tested, and operating effectively.
• Managing workflows within Governance, Risk, and Compliance platforms supporting controls, risk, privacy, compliance, and audit activities.
• Supporting employee compliance awareness, education, and training initiatives.
• Providing thought leadership that advances governance, risk, compliance, and control maturity across the organization.
• Mentoring peers and helping build organizational capability through knowledge sharing and collaboration.

Minimum Qualifications

• Bachelor's degree in Computer Science, Information Systems, Finance, Accounting, or a related field.
• Five or more years of experience in Information Systems Audit, IT Risk Assurance, Internal Audit, External Audit, or a related discipline.
• Five or more years of experience supporting SOX compliance, Internal Control over Financial Reporting (ICFR), and PCAOB standards.
• Experience designing, testing, evaluating, and improving IT controls in complex enterprise environments.
• Strong knowledge of governance, risk, and compliance frameworks, including SOX, NIST CSF, COBIT, GDPR, CCPA, and related standards.
• Strong analytical and problem-solving skills with the ability to evaluate large amounts of information and communicate meaningful insights.
• Excellent interpersonal and communication skills, including the ability to explain technical concepts to non-technical audiences.
• Bachelor's degree in a related field or equivalent experience.

Desired Skills and Experience

• Professional certifications such as CISA, CISSP, CRISC, CISM, or related credentials.
• Experience working with cloud environments, legacy on-premises technologies, and complex enterprise architectures.
• Experience reporting compliance and risk assessment results to leadership through clear and effective written communication.
• Experience with Governance, Risk, and Compliance (GRC) platforms and workflow management.
• Experience supporting privacy programs and regulatory requirements, including GDPR, CCPA, or similar frameworks.
• Experience working with third-party risk management and vendor assessments.
• Experience collaborating with external auditors and consulting firms, including Big Four audit organizations.
• Strong facilitation and stakeholder management skills across multiple business functions.
• Proficiency with Microsoft Office tools, including Word and Excel.
• SQL experience is a plus.
• Self-motivated with a continuous learning mindset and the ability to adapt in a fast-moving environment.

Qualified applicants must be authorized to work in the United States on a full-time basis. Steelcase will not provide support for or sponsor work authorization and/or visas for this role.

Additional Information

#mid_senior_level #LI-Onsite #Information_Technology #Management #Consulting #LI-EW1

At Steelcase, we put people at the center of everything we do. We understand the role of work and believe that it can bring meaning and purpose to the lives of our customers and our employees. We prioritize supporting our employees both in and out of work, in all aspects of their lives. When we bring our talents together, we make a positive lasting impact through our work and communities.

Steelcase provides employment opportunities to all qualified employees and applicants without regard to race, color, creed, genetic information, religion, national origin, gender, sexual orientation, gender identity and expression, age, disability, or veteran status and bases all employment decisions only on valid job requirements. If we can make the application process easier through accommodation, please email us at [e-mail].