Sr Manager SOX & Operational IT Audits

VinFast US; Irvine (CA); On-site; USD 140,000 - 160,000; Full time

Job summary

An established industry player is seeking a Senior Manager for SOX and Operational IT Audits to enhance their Internal Controls and Compliance team. This pivotal role involves designing audit strategies, leading IT audits, and ensuring compliance with SOX IT controls and cybersecurity standards. The ideal candidate will possess over 7 years of experience in internal controls and IT audits, coupled with strong project management and communication skills. Join a dynamic environment where your expertise will drive impactful changes and foster collaborative relationships across teams. If you're ready to take on this challenge, your next career step awaits!

Qualifications

• 7+ years of experience in internal controls and IT audit required.
• CISA, CIA certifications mandatory; CPA is a plus.
• Strong understanding of SOX compliance and ITGCs.

Responsibilities

• Design audit strategies and lead IT audits focusing on SOX controls.
• Evaluate system designs and cybersecurity practices.
• Communicate audit results and recommendations to stakeholders.

Skills

Internal Controls

IT Audit

Cybersecurity

Project Management

Communication Skills

Critical Thinking

Education

Bachelor's degree in Accounting, Business Administration, or Computer Science

CISA, CIA, or other relevant professional certifications

CPA designation

Tools

ACL

IDEA

Power BI

COBIT

COSO

Job description

We are seeking an experienced Senior Manager, SOX and Operational IT Audits to join our Internal Controls and Compliance team. Reporting to the Director, Internal Controls and Compliance, this role will provide assurance on the effectiveness of IT-related controls and compliance, with a focus on SOX IT controls, cybersecurity, and technology operational audits.

RESPONSIBILITIES & KEY ACTIVITIES:

• Design audit strategies and develop IT-specific audit plans.
• Lead and execute audits on IT General Controls (ITGCs), IT application controls (ITACs), compliance, cybersecurity, and system recovery.
• Scope and review SOX IT controls, including ITGCs and automated controls.
• Lead IT SOX testing, design reviews, walkthroughs, and assessments of deficiencies.
• Support the Director Internal control with scoping and testing business process level controls and testing as needed.
• Partner with business process owners to assess risks, identify root causes, and implement mitigating controls.
• Identify and analyze Information Produced by the Entity (IPE), including system-generated reports and data sets used in financial reporting.
• Design and execute testing procedures to validate the accuracy, completeness, and reliability of IPE, ensure alignment with SOX testing and evidence requirements, and coordinate with process and system owners to remediate issues identified during IPE testing.
• Evaluate system designs, implementations, and cybersecurity practices to ensure alignment with company policies and industry standards.
• Assess SOC 1 and SOC 2 reports for service and sub-service organizations, identifying risks and control gaps.
• Coordinate with external auditors for SOX 404 audits.
• Build collaborative and trusting relationships with business partners, management, and cross-functional teams.
• Clearly communicate audit results, business insights, and recommendations to stakeholders.
• Contribute to the automation and enhancement of internal audit processes, including tool implementations and data analytics integration.
• Participate in or lead ad-hoc projects and special initiatives, as needed.

KNOWLEDGE AND EXPERIENCE REQUIRED:

• Bachelor's degree in Accounting, Business Administration, Computer Science, or a related field.
• CISA, CIA, or other relevant professional certifications required. CPA designation an asset.
• 7+ years of experience in internal controls, audit, or IT audit, including at least 4+ years specifically in IT audits.
• Proven expertise in auditing principles and techniques, with strong planning and organization skills to handle complex issues.
• In-depth knowledge of business, financial, and IT audit risks, with a deep understanding of the relationship between ITGCs, application controls, and the impact on SOX compliance.
• Experience with networks, cloud computing, and IT and internal control frameworks such as COBIT and COSO.
• Demonstrated ability to design and test ITGCs and SOX controls, particularly related to IPE testing and reporting, ensuring they are robust and effective in mitigating risks.
• Strong project management skills with the ability to manage multiple tasks, competing priorities, and timelines both independently and as part of a team.
• Excellent written and verbal communication skills, with a demonstrated ability to build relationships and influence senior stakeholders, including the ability to clearly present findings and recommendations.
• Critical thinking and problem-solving ability, with a track record of developing, implementing, and adopting innovative approaches to audit challenges.
• Ability to effectively lead audits from start to finish, including developing audit strategies, scoping, testing, reporting, and tracking remediation.
• Familiarity with data analytics tools (e.g., ACL, IDEA, Power BI) and experience using them to enhance audit effectiveness and efficiency.

VinFast Auto is committed to fair, equitable, and transparent compensation. Final compensation will be determined by various factors such as your relevant work experience, education, certifications, skills, and geographic location. The pay range for this position is $140,000-$160,000.

EOE Statement: VinFast is an Equal Opportunity Employer that does not discriminate on the basis of race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, retaliation, parental status, military service, or other non-merit factor. All employment is decided based on qualifications, merit and business need.