SOX Auditor

About the role

We are looking for an experienced SOX Auditor to lead our Sarbanes‑Oxley compliance program and strengthen the internal control environment. The role involves evaluating business and IT processes, testing controls, identifying gaps, and supporting both internal and external audit activities.

Key responsibilities

• Perform SOX compliance activities, including process walkthroughs, risk assessments, control design assessments, and operating effectiveness testing.
• Evaluate Internal Controls over Financial Reporting (ICFR) in line with SOX requirements and the COSO framework.
• Maintain and update Risk and Control Matrices, process narratives, flowcharts, control descriptions, testing procedures and workpapers.
• Test key controls across core processes such as Record‑to‑Report, Procure‑to‑Pay, Order‑to‑Cash, Payroll, Treasury, Financial Close, Fixed Assets, Revenue Recognition, and others.
• Identify control deficiencies, assess impact, and collaborate with process owners to develop and track remediation plans.
• Support the annual SOX certification, coordinate with internal audit, external auditors, Finance, Accounting, IT, Risk and Compliance teams.
• Review changes to business processes, systems or accounting practices for SOX impact and document Entity‑Level Controls.
• Monitor testing schedules, open issues and audit deliverables to ensure timely completion.

Required profile

• Strong knowledge of SOX 404, Internal Controls over Financial Reporting (ICFR) and the COSO framework.
• Proven experience in risk assessment, control design evaluation and audit testing.
• Ability to work effectively with Finance, Accounting, Technology, Risk, Compliance and business stakeholders.
• Excellent analytical skills and attention to detail for documenting controls and testing results.
• Experience coordinating remediation activities and supporting external audit engagements.

Required skills

• SOX 404 compliance
• ICFR (Internal Controls over Financial Reporting)
• COSO framework
• Risk assessment
• Audit testing
• Control documentation