IT GRC SOX Specialist - Regulatory Frameworks
HybridCambridge, England, United Kingdom
Job Summary
Conduct current-state assessment and gap analysis of IT controls against SOX expectations, then test ITGCs across Access Management, Change Management, and IT Operations. Create and refresh control documentation including narratives, flowcharts, and evidence checklists while facilitating structured handover to BAU teams via workshops and coaching. Configure Riskonnect for control library structure, RCM mapping, and issue tracking, defining interim processes until the platform is live. Support internal and external auditors for walkthroughs and testing, ensuring evidence requests are timely and consistent with control intent. Drive a robust assurance role to improve audit outcomes and establish a clear SOX operating model for IT leadership.
Required Qualifications
- Strong, demonstrable experience operating SOX ITGCs and supporting SOX audits (walkthroughs/testing/remediation)
- Practical experience embedding controls into IT processes
- Experience working in environments with evolving tooling and maturity; able to set up effective interim approaches
- Proven ability to coach and upskill IT teams and build sustainable control ownership
- Strong SOX/ICFR understanding and audit expectations (PCAOB-aligned)
- 5+ years experience in IT, Information Security, Risk, Audit, or related discipline
- Expectation of being on-site 50% of your working hours
- Must undergo and pass a drug screening and comprehensive background check before they start employment
- Must provide proof of educational attainment
- Must provide employment history verification
- Must provide proof of work authorization
- Must provide criminal records check
- Must provide identity verification
- Must provide credit check (subject to local laws)
Desired Qualifications
- Experience with GRC tools (Riskonnect desirable)
- Knowledge of COSO, COBIT, ITIL
- Awareness of ISO 27001 / NIST helpful for alignment
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.