Manager, GRC – SOX Digital Transformation

The Manager, GRC – SOX Digital Transformation plays a key role in executing and evolving the organization’s IT SOX compliance and controls modernization initiatives. This role focuses on enhancing the efficiency, automation, and effectiveness of IT general controls (ITGCs) and application controls through digital transformation efforts, including GRC tooling, data analytics, and process standardization. 

This individual partners closely with Internal Audit, Finance, and Technology teams to support SOX compliance, drive control improvements, and implement scalable, technology-enabled solutions that strengthen the overall control environment. 

 

Key Responsibilities 

SOX & IT Controls Execution 

• Support the end-to-end execution of IT SOX compliance activities, including scoping, walkthroughs, control testing, and remediation tracking. 

• Evaluate the design and operating effectiveness of IT general controls (logical access, change management, operations, and SDLC). 

• Coordinate with control owners to ensure timely completion of control activities and remediation efforts. 

• Assist in preparing audit-ready documentation and support external audit requests. 

 

SOX Digital Transformation & Automation 

• Drive initiatives to modernize and automate SOX IT controls through GRC platforms and enabling technologies. 

• Partner with stakeholders to standardize and optimize control design across systems and platforms. 

• Leverage data analytics and visualization tools (e.g., Power BI) to enhance control monitoring and reporting. 

• Support implementation, enhancement, and ongoing management of GRC tools (e.g., ServiceNow GRC, Archer, AuditBoard). 

• Identify opportunities to reduce manual effort, improve control reliability, and enhance audit efficiency. 

 

GRC Program Support 

• Contribute to the development and continuous improvement of IT GRC policies, standards, and procedures. 

• Participate in technology risk assessments across cloud, ERP, and SaaS environments. 

• Align IT controls with internal policies and external frameworks (e.g., COSO, COBIT, NIST). 

• Support compliance efforts related to SOC audits and other regulatory or certification requirements, as needed. 

 

Stakeholder Collaboration & Reporting 

• Partner with Internal Audit, Finance (SOX), and IT teams to ensure alignment on control requirements and testing approaches. 

• Translate control requirements into practical guidance for technical and non-technical stakeholders. 

• Track and report on SOX control performance, deficiencies, and remediation status. 

• Promote a culture of accountability and continuous improvement in controls and compliance. 

 

Qualificationsgorustawsazureaidataanalyticsproductdesign