Senior Manager, SOX

Key Responsibilities

• Coordinate the annual SOX 404 program, including internal control risk assessment, planning, PBC audit request coordination and collection, and scheduling of annual walkthroughs and operating-effectiveness testing for financial processes and in-scope IT applications
• Maintain and review the Risk Control Matrix (RCM), process narratives, flowcharts and supporting workpapers to ensure clear linkage among financial reporting risks, controls, and audit evidence
• Lead the execution of walkthroughs and control testing across logical access, change management, computer operations, backup and recovery, system development life cycle activities, automated system controls, configurations, batch jobs, interfaces, and key reports
• Evaluate control deficiencies, determine root causes and potential impact, support severity assessments, and partner with control owners to develop and monitor the status of remediation plans and open deficiencies
• Maintain the inventory of key reports for in-scope applications, including report ownership, control linkage, and testing status
• Advise process owners on SOX governance requirements for new systems, upgrades, and significant process changes, including control ownership, documentation expectations, approval requirements, and post-implementation monitoring
• Develop and deliver training on SOX, internal controls over financial reporting, information technology risk, documentation standards, and control-owner responsibilities
• Lead the SOX workstream for new ERP implementations and newly in-scope business processes, including control redesign, documentation, testing, and readiness assessments
• Perform annual segregation of duties analysis and fraud risk assessment
• Maintain close working relationships with management to obtain a deep understanding of financial, IT and entity level controls
• Provide assistance to internal and external auditors during the SOX audit process, including aligning on testing approaches, coordinating requests, providing supporting documentation, addressing questions, reducing unnecessary duplication of effort, and ensuring the timely completion of audits
• Review the execution and documentation of recurring system-related controls, including quarterly user access reviews, system change reviews, and key report change reviews
• Obtain and evaluate SOC 1 reports for significant service providers, identify applicable complementary user entity controls and assess exceptions and coverage gaps
• Identify opportunities to streamline and strengthen the internal control environment and communicate and monitor resulting recommendations
• Perform special project work and other procedures as necessary
• Develop and maintain technical proficiency and current knowledge of professional standards, including accounting, auditing and financial reporting requirements
• Occasional travel on an ad hoc basis may be required

Required Qualifications and Technical Proficiencies

• Strong knowledge of internal control frameworks and requirements applicable to internal control over financial reporting, including SOX, PCAOB standards, and risk-based audit practices
• Demonstrated experience with information technology general controls, automated controls, key reports, interfaces, SOC 1 reports, and complementary user entity controls
• Proven ability to evaluate control design and operating effectiveness, assess deficiencies, and guide remediation
• Experience with enterprise resource planning systems, financial applications, identity and access management tools, reporting platforms, and governance, risk, and compliance technology
• Experience with system implementations, data migrations, and transformation initiatives affecting financial reporting
• Ability to interpret SSAE 18 reporting requirements, assess report scope and coverage periods, and evaluate the effect of service-auditor findings on the company's control environment
• Strong project management, analytical, organizational, and problem-solving skills, with the ability to manage competing priorities and deadlines
• In depth understanding of business processes and financial transaction flows
• Strong collaborative skills with proven success working with cross-functional teams
• Excellent verbal and written communication and interpersonal skills, with the ability to present complex control matters clearly to technical and nontechnical stakeholders
• Self-motivated, proactive, and able to learn new systems, processes, and technical requirements quickly
• Ability to exercise sound judgment and deliver high-quality work with limited supervision in a fast-moving environment
• Strong computer skills (Microsoft Word, Excel, PowerPoint)
• Experience with accounting software (NetSuite, Coupa) and 3PL business model

Preferred Education and Experience

• Bachelor's degree in Accounting, Finance, Information Systems, Business, or a related field
• CPA, CIA, CISA, or other relevant professional certification
• 8+ years of progressive experience in SOX compliance, internal audit, external audit, information technology audit, or internal controls, including experience in Biotech industry
• Big 4 public accounting or similar experience