Senior IT SOX Controller

Role and Responsibilities

1. Internal Control & Audit campaigns planning and execution 

• 
  

  Implement internal control and train the control owners. 

  
  


• 
  

  Plan, prepare, and lead IT Internal Control and Compliance audit/assessment campaigns across the organization, identifying areas of improvement and compliance risks, ensuring quality and timely delivery of results. Those campaigns will be based on various IT & Cyber frameworks.

  
  


• 
  

  Assess and monitor IT General Controls (ITGC), systems, and processes to ensure compliance with policies, regulations, and best practices

  
  


• 
  

  Review and update the associated Risk Control Matrix (RCM).

  
  

2. Team Supervision and Development

• 
  

  Review and validate audit work performed by team members, providing constructive feedback and guidance

  
  


• 
  

  Coach, mentor, and develop junior staff to build expertise and ensure consistent audit standards

  
  

3. Documentation and Reporting

• 
  

  Document findings, prepare reports, and present recommendations to management

  
  


• 
  

  Initiate the reporting presentation for management

  
  


• 
  

  Ensure that the documentation is well updated on our GRC Tool application

  
  

4. Stakeholder Collaboration

• 
  

  Closely works with control owners to ensure a good understanding of Internal Control requirements

  
  


• 
  

  Collaborate with IT, information security, and business teams to strengthen governance frameworks and support the implementation of IT policies, standards, and procedures

  
  

5. Continuous Improvement and Awareness

• 
  

  Stay up to date with emerging technologies, cybersecurity threats, and regulatory requirements

  
  

Experience and Skills

Education and experience

• Bachelor’s degree in Information Technology, Computer Science, Information Systems, or related field (Master’s degree preferred)


• Professional certifications such as CISA, CISM, CISSP, or ISO 27001 Lead Auditor strongly preferred


• At least 5 to 8 years of experience in IT Audit and/or IT Internal Control, ITGC/SOX Compliance project,  Security, GRC Governance, Risk and Compliance.


• In-depth knowledge of IT general controls (ITGC), cybersecurity frameworks, and regulatory requirements (e.g., SOX, GDPR, ISO, NIST, COBIT)


• Strong experience in audit methodologies, risk assessment, and reporting at senior management level


• Proven ability to manage audit teams, lead complex engagements, and influence stakeholders

Skills and behavioral competencies

• Proven ability to work independently and proactively manage deliverables in a fast-paced environment.


• Advanced analytical and critical-thinking skills, capable of identifying complex risks and designing effective solutions


• Excellent communication and presentation skills, able to engage confidently with senior stakeholders business people and non-technical audiences


• Strategic mindset with the ability to balance detail-oriented audit work with big-picture risk management goals


• Strong organizational skills, able to manage multiple projects, deadlines, and priorities in a fast-paced environment


• High ethical standards, integrity, and professional judgment


• Collaborative and influential, skilled at building strong cross-functional relationships


• Adaptability and resilience in navigating change and evolving technologies

What We Offer