IT SOX Controls Manager

As the IT SOX Controls Manager, you will serve as the operational lead for the Company's day-to-day IT SOX program while remaining a highly hands-on contributor. This role combines elements of technology risk consulting, internal controls, and SOX program execution, requiring both strong technical expertise and practical judgment. 

You will partner closely with Technology, Engineering, Accounting, Compliance and Internal Controls leadership to evaluate technology risks, strengthen the Company's control environment, and continuously improve how the IT SOX program operates. This includes performing and overseeing day-to-day IT SOX activities, coordinating ongoing control monitoring, evaluating new technologies and system changes, and working directly with control owners to embed effective and sustainable controls into business processes. 

Success in this role requires the ability to translate high-level objectives into practical solutions, identify opportunities to strengthen processes, appropriately challenge existing practices, and balance technical risk with operational realities. This role is intentionally designed as a hands-on position where the successful candidate will personally execute significant portions of the Company's IT SOX program while helping mature the function over time. 

We are seeking candidates based in the Chicagoland area, as this role involves occasional in-person collaboration at our Chicago office.

What You'll Do:

Program Leadership 

• Lead the day-to-day execution of the Company’s IT SOX program while partnering with the Director of Internal Controls & SOX on overall program direction 
• Contribute to the ongoing evolution and maturation of the Company’s IT SOX program, identifying opportunities to improve effectiveness, scalability and efficiency 
• Translate strategic initiatives and program objectives into practical, repeatable operating procedures 

Risk Assessment & Control Design 

• Lead IT SOX risk assessment, application scoping and control scoping activities 
• Partner with Technology and Engineering teams to evaluate new applications, infrastructure changes and system implementations to ensure appropriate SOX controls are designed and implemented 
• Evaluate technology risks and recommend practical solutions that appropriately balance risk mitigation with operational efficiency 

Control Execution & Monitoring 

• Own quarterly and annual IT SOX execution activities, including walkthroughs, controls testing, issue evaluation and remediation follow-up 
• Develop, execute and continuously enhance monitoring activities that proactively identify control execution issues, completeness concerns and process deviations  
• Work directly with Technology teams and controls owners throughout the quarter to help ensure key controls are executed effectively and supporting evidence is complete and accurate 
• Evaluate the effectiveness of IT General Controls, automated controls, key reports and technology-enabled business process controls 

Process Improvement 

• Identify opportunities to simplify control execution, improve monitoring capabilities, strengthen documentation and increase automation across the IT SOX program 
• Lead process improvement initiatives by partnering with Technology, Engineering and Accounting teams to operationalize new ideas and continuously improve the control environment 

Stakeholder Partnership 

• Serve as a trusted advisor to Technology and Engineering teams by providing practical guidance on control design, implementation and remediation 
• Build strong cross-functional relationships across Technology, Accounting and Compliance 
• Coordinate activities with external auditors and co-sourced resources while maintaining ownership of the Company’s IT SOX program 

What You'll Bring:

• Bachelor’s or master’s degree in Information Systems, Computer Science, Accounting, Finance, or a related field required 
• 4+ years of progressively responsible professional experience in public accounting, internal audit or internal controls.  
• Strong understanding of IT General Controls (access management, change management and IT operations) in SOX environments 
• Experience testing automated controls and key reports 
• Experience evaluating user access provisioning, role design and privileged access controls 
• Understanding of system architecture, data flows and system interfaces, including risks related to data integrity in financial reporting 
• Experience evaluating controls in cloud-based environments 
• Familiarity with software development lifecycle and agile development environments and controls 
• Ability to apply common control frameworks (e.g. COBIT, NIST) in practical SOX environments 
• Demonstrated ability to evaluate technology risks and apply sound professional judgment in determining appropriate control responses 
• Ability to translate high-level objectives into executable work plans while appropriately collaborating with leadership on key decisions 
• Experience partnering directly with Technology, Engineering or application teams to evaluate risks, improve controls and solve complex problems 
• Ability to balance technical requirements with practical business considerations in dynamic environments 
• Strong critical thinking, problem solving and communication skills with the ability to influence stakeholders through collaboration rather than authority 
• Demonstrated ability to identify opportunities to improve processes, increase automation and enhance operational efficiency 
• Experience leading engagements, workstreams or complex initiatives with progressively increasing responsibility 
• Able to travel occasionally both domestically and internationally #LI-REMOTE #LI-PROMOTE