IT SOX Manager

THE ROLE:

As the IT SOX Manager, you will play a pivotal role in advising the business on effective IT controls and leading IT controls testing as part of Management’s SOX 404(a) compliance programme. This is a hands‑on position with one direct report, reporting to the Director of Internal Audit. You will help mature and strengthen the SOX Programme as Group Auditors transition and as new products, systems, and processes enter scope.

As part of the broader SOX and Internal Audit team, you may also be required to support Business Process SOX testing, including the assessment of IT Automated Controls and Key Reports.

Main Responsibilities

Plan, coordinate, and execute all phases of the IT SOX Assessment:

• Support IT scoping and the annual risk assessment.
• Manage updates to SOX documentation, including risk and control matrices and process flowcharts, and assess controls as new systems or processes evolve.
• Ensure IT controls are appropriately designed across all in‑scope processes and global entities.
• Manage ITGC testing, including design and operating effectiveness testing, remediation, and top‑up testing.
• Review SOX Auditor workpapers as part of a robust quality assurance process.
• Provide technical guidance to control owners in remediating IT‑related control gaps.
• Ensure all IT‑related deficiencies are remediated and re‑tested before year‑end.
• Track and monitor ITGC SOX assessment status for weekly, monthly, and quarterly reporting to senior management, ensuring all deadlines and deliverables are met.
• Coordinate with external auditors on the annual SOX testing plan and support audit queries and evidence requests.
• Deliver internal control training to control owners.
• Mentor and develop talent within the wider SOX team.

New System Implementations

Partner with system implementation teams to ensure:

• Appropriate audit trails are maintained throughout the system development lifecycle (SDLC).
• Application and general IT controls are fully compliant and aligned to best practice prior to go‑live.

WHAT YOU’LL BRING:

• Big 4 experience with a strong SOX testing background focused on IT General Controls and SDLC controls.
• Solid understanding of SOX and internal control frameworks (e.g., COSO).
• Strong written and interpersonal communication skills.
• Proven ability to lead control testing and manage auditors.
• Advanced Excel and Visio skills.

IT WILL BE A BONUS IF YOU COME FROM A BIG 4 CONSULTANCY

We enjoy an ‘office-first’ culture and maximize opportunities to collaborate, connect and learn together. Our hybrid working models differ depending on your role and location. 

One team, being brave, driving change

Let us know when you apply if you need any assistance during the recruiting process due to a disability.