SOX Readiness & Internal Controls Lead

Triumph Arcade; San Francisco (CA); On-site; USD 180,000 - 230,000; Full time

Job summary

Triumph Labs, Inc. in San Francisco is building a robust internal controls and SOX readiness program. The Senior Manager will lead the design of controls in NetSuite, define the scope, and develop the risk and control matrix to prepare for PCAOB audits.

You will serve as the primary contact for external auditors, manage ITGCs in a modern data stack, and drive a practical, scalable control environment. Success in year one includes documenting scope, completing walk-throughs, and achieving SOC 1

Qualifications

• 6+ years in internal controls, SOX compliance, or external audit.
• At least 3 years in-house at a public or pre-IPO company as owner of ICFR.
• Experience with automated data pipelines and ITGCs in a modern data stack.
• Knowledge of COSO 2013, COBIT for ITGCs, PCAOB AS 2201 and SEC SOX guidance; IIA IPPF.
• Ability to simplify controls and defend them against external auditors.
• Comfort presenting to senior leadership; strong documentation skills.

Responsibilities

• Scope, build, own, and manage Triumph’s end-to-end SOX program from risk assessment to remediation.
• Build and own risk control matrix and risk-based audit plan for financial statements workflows.
• Coordinate with external auditors on walkthroughs, testing, issue resolution, and scope defense.
• Prepare and present SOX updates to VP, C-suite, and auditors; report status and remediation progress.
• Promote SOX awareness across the organization and train control owners.
• Identify opportunities to streamline and automate controls as systems evolve.
• Direct third-party SOX consultants while keeping decision-making internal.

Skills

SOX Compliance

ICFR Ownership

Audit Coordination

COSO Framework

ITGCs

AuditBoard

Tools

AuditBoard

Workiva

Job description

Triumph Labs, Inc. in San Francisco is building a robust internal controls and SOX readiness program. The Senior Manager will lead the design of controls in NetSuite, define the scope, and develop the risk and control matrix to prepare for PCAOB audits.

You will serve as the primary contact for external auditors, manage ITGCs in a modern data stack, and drive a practical, scalable control environment. Success in year one includes documenting scope, completing walk-throughs, and achieving SOC 1