SOX Compliance Manager

fei; Uniondale (NY); On-site; USD 120,000 - 180,000; Full time

Job summary

fei is seeking a SOX Compliance Manager to lead the design, execution, and enhancement of our Sarbanes-Oxley program. You will oversee end-to-end cycles, coordinate with Finance, Operations, and Technology, and ensure robust control documentation and testing with external auditors.

The role requires 5+ years in internal audit or SOX, deep COSO/SOX knowledge, and strong ITGC collaboration. A CPA/CIA/CISA is preferred. Located in Uniondale, NY with possible travel to other states.

Qualifications

• 5+ years in internal audit, public accounting, or SOX compliance management.
• Bachelor's degree in Accounting, Finance, or related field; CPA/CIA/CISA preferred.
• Strong understanding of SOX 404 requirements, COSO framework, US GAAP, and PCAOB standards.
• Proven ability to lead end-to-end SOX cycles, including risk assessments and controls documentation.
• Experience collaborating with IT teams on ITGCs and application controls.

Responsibilities

• Oversee and execute the annual SOX testing plan with external auditors.
• Maintain and enhance the Risk and Control Matrix (RCM) for key processes, ITGCs, and controls.
• Conduct and refresh annual risk assessments per COSO framework.
• Remediate control deficiencies with cross-functional leaders and monitor re-testing.
• Review control design and testing effectiveness for scalability and clarity.
• Serve as liaison to process owners and auditors to mitigate issues and optimize budget.
• Drive continuous improvement by integrating technology tools into control documentation and reporting workflows.

Skills

SOX compliance

Internal controls

COSO framework

ITGCs

Data analysis

Cross-functional leadership

Communication

Education

Bachelor's degree in accounting/finance

Job description

Job Description: SOX Compliance Manager

We are seeking a dedicated professional to manage, design, execute, and enhance our Sarbanes-Oxley (SOX) compliance program. You will lead end-to-end SOX cycles, oversee the annual testing plan, and partner with leaders across Finance, Operations, and Technology to ensure robust internal controls, drive process efficiency, and ensure seamless coordination with external auditors.

Position Details

Department: Internal Audit / Finance

Position Type: Full-time

Location: Uniondale, NY. (Possible travel to NJ, CO, CA?)

Reports to: ___________________________________________________

Qualifications & Skills

• Experience:5+ years of experience in internal audit, public accounting, or SOX compliance management. Bachelor's degree in Accounting, Finance, or a related field (CPA, CIA, or CISA certification preferred).
• Technical Expertise: Strong technical understanding of SOX Section 404 requirements, the COSO framework, US GAAP, and PCAOB standards.
• Leadership Skills: Proven ability to lead end-to-end SOX cycles, including risk assessments and controls documentation.
• IT Controls: Proven experience collaborating with IT teams on IT General Controls (ITGCs), application controls, and technology-dependent processes.
• Communication:Exceptional relationship-building skills with the ability to influence and guide cross-functional process owners.
• Cross-Functional Partnering: Ability to partner with Finance, Operations, and Technology leaders to evaluate and remediate control deficiencies.

Key Responsibilities

• Program Oversight & Management: Oversee and execute the annual SOX testing plan while coordinating directly with external auditors. Lead the end-to-end SOX compliance lifecycle, including annual scoping, risk assessments, and controls documentation.
• Matrix Maintenance: Maintain and enhance the Risk and Control Matrix (RCM) for key business processes, ITGCs, and application controls. Test ITGC domains including logical access, change management, program development, and data center operations. Validate automated system configurations, interface controls, and Key Reports (Information Produced by Entity - IPE).
• Risk Assessments: Conduct and refresh annual risk assessments in alignment with the COSO framework.
• Deficiency Remediation: Partner with cross-functional leaders to evaluate control deficiencies and develop effective mitigation strategies. Evaluate control deficiencies, collaborate with management to formulate remediation plans, and monitor re-testing.
• Control Evaluation: Review control design and testing effectiveness to ensure long-term scalability and operational soundness. Identify redundant controls to streamline the framework and enhance control language clarity.
• Liaison Duties: Serve as the primary liaison for process owners to interpret control issues and develop effective mitigation strategies. Coordinate the reliance strategy to optimize the external audit budget and minimize business disruption. Serve as the primary point of contact for external auditors to facilitate information requests and PBC (Provided by Client) logistics.
• Process Improvement: Drive continuous improvement by integrating technology tools into control documentation and reporting workflows. Conduct annual process walkthroughs with control owners to document end-to-end workflows and identify gaps.

We are seeking a professional to manage, design, execute, and enhance our SOX compliance program

Strong technical understanding of SOX 404 requirements, COSO, US GAAP, and PCAOB standards

Proven ability to lead end-to-end SOX cycles, including risk assessments and controls documentation

Experience collaborating with IT teams on technology-dependent controls and information technology general controls

Oversee and execute the annual SOX testing plan, coordinating with external auditors

Maintain and enhance the Risk and Control Matrix (RCM) for key business processes, ITGCs, and application controls

Conduct and refresh annual risk assessments consistent with the COSO framework

Partner with Finance, Operations, and Technology leaders to evaluate and remediate control deficiencies

Review control design and testing effectiveness for scalability and operational soundness

Serve as the main liaison for process owners to interpret control issues and develop mitigation strategies

Drive continuous improvement by integrating technology tools into control documentation and reporting workflows