Governance, Risk and Control (SOX) Specialist

Wonder•New York, NY

11d•$176,000 - $183,500•Onsite

About The Position

Wonder is looking for a GRC specialist with a deep understanding of security risk management and the evolving threat landscape. In this role you will Develop and execute internal security risk assessments, track security maturity metrics and KPIs, and conduct control testing for IT systems supporting financial reporting. This role is key to supporting our audit readiness and compliance initiatives.

Requirements

3–5 years of experience with frameworks such as ISO 27001, SOC 2, NIST, CIS Controls, HIPAA, IT audit and SOX compliance
Hands-on experience with SOX compliance, ITGCs, and the full audit lifecycle — scoping through remediation
Experience planning and executing information security risk assessments and security control testing
Experience coordinating with internal or external auditors, including evidence gathering and walkthroughs
Strong written and verbal communication skills
High attention to detail and strong organizational skills with the ability to manage multiple workstreams simultaneously

Nice To Haves

CISA, CRISC, CISSP, or equivalent certification highly preferred

Responsibilities

Develop and execute internal security risk assessments
Track security maturity metrics and KPIs
Conduct control testing for IT systems supporting financial reporting
Support audit readiness and compliance initiatives
Coordinate with internal or external auditors, including evidence gathering and walkthroughs
Explain technical controls to nontechnical audiences