Overview:
The SOX Controls and Compliance Manager will play a critical role in ensuring the company's compliance with the Sarbanes-Oxley Act (SOX) requirements. This individual will be responsible for designing, implementing, maintaining, and testing internal controls over financial reporting (ICFR), as well as coordinating with management, internal and external auditors for any required remediations. The Manager will drive the continuous improvement of the SOX program, promote a strong control environment, and provide expert guidance to stakeholders across the organization.
Responsibilities:
- SOX Program Management:
- Lead the planning, execution, and reporting of the annual SOX compliance program.
- Develop and maintain comprehensive documentation, including process narratives, flowcharts, control matrices, control designs and risk assessments.
- Coordinate with process owners to identify and document control changes and ensure controls are updated as business processes evolve.
- Manage the relationship and deliverables with external audit partners related to SOX testing and inquiries.
- Prepare and present SOX findings, assertions, and program status to senior management.
- Assist and provide expert guidance to management in the implementation and design of controls and overall SOX compliance.
- Internal Control Design & Effectiveness:
- Oversee the design, implementation, and testing of internal controls over financial reporting (ICFR), including both business process controls and IT General Controls (ITGCs).
- Conduct walkthroughs to understand key business processes, identify risks, and assess the effectiveness of control design.
- Perform and/or oversee the testing of controls for operational effectiveness, ensuring adequate coverage and proper documentation of results.
- Evaluate control deficiencies, identify root causes, and work with control owners to develop and monitor remediation plans to ensure timely resolution.
- Rationalize and optimize controls, seeking opportunities for automation and efficiency improvements while maintaining compliance.
- Risk Assessment:
- Lead or participate in the annual SOX risk assessment and scoping exercises to identify in-scope processes, accounts, and systems.
- Assess the impact of new systems, processes, and business changes on the internal control environment and update controls accordingly.
- Collaboration & Communication:
- Serve as a key liaison between internal audit, process owners (Finance, IT, Operations, etc.), and external auditors.
- Provide guidance and training to control owners and stakeholders on SOX compliance requirements, internal control best practices, and the importance of a strong control environment.
- Foster a culture of compliance and continuous improvement across the organization.
- Policy & Procedure Enhancement:
- Review and enhance existing policies and procedures related to internal controls and SOX compliance.
- Stay abreast of changes in PCAOB rulemaking, SEC requirements, and industry best practices to ensure the SOX program remains current and effective.
- Special Projects:
- Assist with other compliance audits and special projects as necessary or assigned.
- Support initiatives related to data gathering and validation for ESG disclosures and other regulatory requirements.
Qualifications:
- Education:
- Bachelor's degree in Accounting, Finance, or a related field required.
- CPA, CIA, CISA, or other relevant certifications highly preferred.
- Experience:
- 5+ years of progressive experience in internal audit, public accounting (audit assurance), or SOX compliance roles.
- Demonstrated experience managing SOX programs in a public company environment.
- Strong understanding of internal control frameworks (e.g., COSO), auditing standards (PCAOB), and SEC regulations.
- Experience with IT General Controls (ITGCs) and a sound understanding of IT platforms, applications, and related technology.