SOX Tech Risk Lead: IAM & Security Controls

Jobtailor; Atlanta (GA); On-site; USD 120,000 - 180,000; Full time

Job summary

Jobtailor in Atlanta seeks an experienced risk and identity governance professional to lead SOX readiness, design IAM controls, and strengthen IT general controls across a complex tech stack.

You will collaborate with audit, security, and business teams to implement policy frameworks, align with NIST/ISO guidelines, and drive continuous improvement in risk management and compliance. Prioritize risk-based testing, document control narratives, and mentor peers in control design and remediation.

Qualifications

• 5+ years in Internal Audit, SOX Compliance, Risk Advisory, or Public Accounting
• Bachelor’s or Master’s degree in Computer Science, Computer Engineering, Information Systems, or related field (preferred)
• Professional certifications preferred: CISA, CRISC, CISSP, CPA, CIA, AWS Certified Cloud Practitioner (or higher)
• Strong knowledge of SOX IT General Controls (ITGCs), technology risk, financial reporting risk, PCAOB requirements, and internal controls
• Experience leading SOX readiness, automation, and transformation initiatives
• Deep understanding of IAM principles, standards, and frameworks including NIST 800-53, ISO 27001, and CIS Controls
• Hands‑on experience assessing and implementing IAM controls across complex technology environments
• Strong knowledge of cloud platforms (AWS, Azure, GCP) and their IAM capabilities
• Extensive experience with SailPoint, CyberArk, and Delinea, including PAM and control design
• Experience with IT Security Audits, Cloud Engineering, and IAM governance
• Familiarity with applying AI/ML techniques in cybersecurity contexts (e.g., anomaly detection)

Responsibilities

• Lead the identification, assessment, and mitigation of technology risks across the organization.
• Develop and maintain risk frameworks, policies, and procedures aligned with industry best practices.
• Develop and enforce IAM policies and procedures to ensure SOX compliance.
• Oversee the control environment for multiple IAM platforms (SailPoint, CyberArk, AD, Azure AD).
• Drive coordination and program management for initiatives impacting SOX scope and control changes.
• Advise control and process owners on SOX requirements, risk assessment, and control design.
• Participate in walkthroughs for high-risk areas and changes.
• Evaluate process changes, assess risk, and provide actionable recommendations.
• Oversee documentation of control narratives and perform control testing.
• Collaborate to support deficiency evaluation including root cause analysis and remediation monitoring.
• Oversee development and execution of cybersecurity controls including access management and data protection.
• Partner with owners to drive awareness of SOX requirements and enterprise control strategy.
• Develop and review testing procedures to ensure scope is sufficient and aligned with risk.
• Stay current on cyber threats, regulatory requirements, and control frameworks (NIST, ISO 27001).

Skills

IAM principles

SOX compliance

tech risk management

NIST/ISO/CIS controls

Cloud IAM

Security certifications

Education

Bachelor's or Master's in CS/IS

Tools

SailPoint

CyberArk

Delinea

AWS

Azure

GCP

Job description

Jobtailor in Atlanta seeks an experienced risk and identity governance professional to lead SOX readiness, design IAM controls, and strengthen IT general controls across a complex tech stack.

You will collaborate with audit, security, and business teams to implement policy frameworks, align with NIST/ISO guidelines, and drive continuous improvement in risk management and compliance. Prioritize risk-based testing, document control narratives, and mentor peers in control design and remediation.