Team Leader - IT SOX Compliance

• Ensure that the team delivers on all IT SOX compliance requirements, including testing, documentation, remediation and continuous improvement of IT controls
• Lead, mentor, and develop a team of SOX compliance analysts
• Delegate tasks, manage resource allocation, and monitor team progress using key metrics
• In collaboration with and under the leadership of the IT Manager, SOX Compliance, identify skill gaps and recruit, train and mentor team members
• Review existing documentation of IT controls, policies, procedures, business processes, risk assessments and management reports for effectiveness and sustainability
• Develop plans to enhance IT controls and implement compliance measures to ensure adherence to regulations, standards, and frameworks, and to address any findings from audits or assessments
• Develop and deliver relevant training content to the divisional and corporate IT teams and other stakeholders
• Support the selection, evaluation, acquisition, implementation and enhancement of GRC solutions, and tools (i.e. SOD monitoring automation) to be used by the IT governance and compliance team, auditors and other stakeholders
• Review, document, evaluate, and test manual and automated computer controls throughout the enterprise IT environment, including server, application, middleware, and client-side
• Develop and implement testing methodologies for application development, IT infrastructure, security, and availability
• Design and execute Sarbanes-Oxley Act/Bill 198 compliance tests of operating effectiveness for IT general controls (ITGCs)
• coordinate required remediation
• Conduct risk assessments on operational IT processes, procedures, and policies
• Interpret audit results and make conclusions on the adequacy and reliability of controls
• prepare and present reports as necessary
• Prioritize assessments and audit projects based on severity of risk and non-compliance
• Communicate control strengths and weaknesses to internal audit
• collaborate with internal audit to develop mitigation plans
• Apply COBIT, COSO, ITIL, or ISO frameworks to all documentation and remediation efforts
• Design and perform reengineering of IT processes and procedures in need of remediation
• Conduct gap analysis via testing and recommend specific actions to fix gaps in processes and/or process management
• Design enhancement for internal controls such as segregation of duties, production change management, software management, security, incident handling, and transmission integrity
• Assist the internal audit team in delivering requests from external auditors and consultants
• Liaise with external auditors to facilitate the auditing process

• Minimum Bachelor’s degree information technology and/or in accounting
• Certified Information Systems Auditor (CISA) or other relevant certification
• Minimum 5 years of IT internal audit/SOX experience or prior work experience with consulting or auditing firm, with prior leadership experience preferred
• Strong familiarity with governance and controls frameworks, such as COBIT, COSO, ITIL
• Direct knowledge of and exposure to Sarbanes-Oxley Act/Bill 198 requirements in relation with ITGCs
• Strong leadership and project management skills
• Familiarity with IT controls within ERP systems, with SAP expertise considered a strong asset
• Solid experience in testing, evaluating, and documenting controls for compliance
• Solid understanding of assessing and designing IT controls in an enterprise-level environment
• PC skills and hands-on experience building tools and presentations with Microsoft Word, Excel, PowerPoint, Visio, Project, and Access

SAP expertise