Analyst, SOX Compliance

Listing expiry: 21 October 2026

About the role

Role Overview

The role supports the global Sarbanes-Oxley (SOX) compliance program by evaluating business processes, assessing financial reporting risks, and testing whether internal controls are appropriately designed and operating effectively. It involves managing assigned control activities throughout the control lifecycle, documenting findings, coordinating remediation, and collaborating with Finance, IT, operational teams, process owners, and external auditors.

Key Responsibilities

• Drive SOX planning, scoping, and risk assessment activities for assigned business processes in coordination with process owners and external auditors.
• Lead business process walkthroughs to assess control design, identify risks, and determine whether controls address financial reporting objectives.
• Test business process controls, including IT-dependent and manual application controls (ITACs), and document conclusions on operating effectiveness.
• Identify control gaps and deficiencies, evaluate their severity and potential impact, and communicate findings to relevant stakeholders.
• Prepare clear, accurate, audit-ready documentation of testing procedures, evidence, findings, and conclusions.
• Coordinate remediation with control owners, track corrective actions, and evaluate whether deficiencies have been resolved effectively.
• Identify opportunities to improve risk coverage, documentation quality, testing efficiency, and the scalability of the SOX program.
• Build relationships with Finance, IT, operational teams, and external auditors while managing competing priorities across global time zones and audit timelines.

Qualifications & Experience

• Two or more years of experience in SOX compliance or Internal Audit, including direct experience evaluating and testing business process controls.
• Experience performing business process walkthroughs, control design assessments, operating effectiveness testing, and control gap analysis.
• Strong understanding of risk assessment, internal controls, audit evidence, deficiency evaluation, and SOX documentation requirements.
• Professional judgment, critical thinking, analytical problem-solving, and root-cause evaluation capabilities.
• Strong written and verbal communication skills, including the ability to explain control concepts and findings to non-specialist stakeholders.
• Ability to manage multiple priorities independently, meet audit timelines, and maintain quality and accuracy with minimal supervision.
• Proficiency with AI tools and Microsoft Excel, Word, and PowerPoint.
• Flexibility to collaborate periodically across global time zones, including with US-based stakeholders and external auditors.
• CA, CIA, or CPA qualification preferred.
• Exposure to IT General Controls (ITGCs) and an understanding of how they support business process controls and financial reporting preferred.
• Experience working with external auditors and cross-functional Finance, IT, and operational teams preferred.
• Experience contributing to SOX program improvements, remediation activities, control optimization, or testing IT-dependent and manual application controls preferred.

Additional Details

• The role provides exposure to business process controls, IT-dependent and manual application controls, risk assessment, and cross-functional audit activities in a global organization.
• The employer describes a flexible-first working culture, mentorship, learning and leadership development, and education support.
• Benefits may include paid volunteer time, August Free Fridays, well-being resources, and regionally tailored programs for employees and their families.
• The recruitment process typically includes an application review, a Zoom interview, and meetings with the hiring manager and other interviewers; the employer states that most processes involve no more than five interviews.
• The employer provides reasonable accommodations for applicants who need assistance during the application process.
• The employer states that recruiters will not request sensitive personal or financial information during the application phase.