Senior SOX & IT Controls Analyst | Hybrid, Growth & Impact

Steelcase; Grand Rapids (MI); On-site; USD 90,000 - 130,000; Full time

Job summary

Steelcase seeks an experienced IT Controls & Compliance professional to manage SOX/ICFR programs, GRC platforms, and risk assessments. You will partner with IT, Security, Finance, Legal, and Audit to implement effective governance processes and drive control maturity.

You will coordinate third-party risk, data privacy requirements, and IT control testing while mentoring peers and elevating risk awareness across the organization.

Qualifications

• Bachelor's degree in a related field or equivalent experience.
• Five or more years of experience in Information Systems Audit, IT Risk Assurance, Internal Audit, External Audit, or a related discipline.
• Five or more years of experience supporting SOX compliance, ICFR, and PCAOB standards.
• Experience designing, testing, evaluating, and improving IT controls in complex enterprise environments.
• Strong knowledge of governance, risk, and compliance frameworks, including SOX, NIST CSF, COBIT, GDPR, CCPA.

Responsibilities

• Leading the maintenance and execution of IT controls and compliance programs to meet regulatory requirements, improve risk posture, and support strategic initiatives.
• Owning and coordinating activities related to SOX, GITCs, Data Privacy, and third-party risk management.
• Serving as a primary liaison between IT, business stakeholders, and audit partners.
• Conducting risk assessments, including framework assessments, policy and procedure reviews, vendor evaluations, contract reviews, and audit activities.
• Maintaining and enhancing the enterprise IT risk register, identifying emerging risks, and tracking remediation efforts.
• Communicating risk, compliance, and control issues to leadership and developing action plans.
• Working with control owners to ensure controls are designed, tested, and operating effectively.
• Managing workflows within GRC platforms supporting controls, risk, privacy, compliance, and audit.
• Supporting employee compliance awareness, education, and training initiatives.
• Providing thought leadership that advances governance, risk, compliance, and control maturity across the organization.

Skills

SOX & ICFR knowledge

Audit coordination

Stakeholder management

Regulatory frameworks

Analytical thinking

Communication skills

Education

Bachelor's degree in Computer Science, Information Systems, Finance, Accounting, or a related field

Tools

GRC platforms

Workflow management

SQL

Job description

Steelcase seeks an experienced IT Controls & Compliance professional to manage SOX/ICFR programs, GRC platforms, and risk assessments. You will partner with IT, Security, Finance, Legal, and Audit to implement effective governance processes and drive control maturity.

You will coordinate third-party risk, data privacy requirements, and IT control testing while mentoring peers and elevating risk awareness across the organization.