Governance, Risk and Control (SOX) Specialist

Wonder Group • New York, NY

10d • Onsite

About The Position

Wonder is looking for a GRC specialist with a deep understanding of security risk management and the evolving threat landscape. In this role you will Develop and execute internal security risk assessments, track security maturity metrics and KPIs, and conduct control testing for IT systems supporting financial reporting. This role is key to supporting our audit readiness and compliance initiatives.

Requirements

• 3–5 years of experience with frameworks such as ISO 27001, SOC 2, NIST, CIS Controls, HIPAA, IT audit and SOX compliance
• Hands-on experience with SOX compliance, ITGCs, and the full audit lifecycle — scoping through remediation
• Strong written and verbal communication skills; able to explain technical controls to nontechnical audiences
• High attention to detail and strong organizational skills with the ability to manage multiple workstreams simultaneously

Nice To Haves

• CISA, CRISC, CISSP, or equivalent certification highly preferred

Responsibilities

• Develop and execute internal security risk assessments
• Track security maturity metrics and KPIs
• Conduct control testing for IT systems supporting financial reporting
• Support audit readiness and compliance initiatives
• Plan and execute information security risk assessments
• Perform security control testing
• Coordinate with internal or external auditors, including evidence gathering and walkthroughs

Benefits

• Competitive compensation package with equity
• 401(k)
• Choice of medical, dental, and vision plans
• Company paid short and long term disability coverage
• Paid time off
• Flexible time off for exempt employees
• Paid vacation for non-exempt employees
• Paid sick leave in compliance with applicable law
• Paid parental leave
• Discounted meals
• Exclusive perks across the Wonder family of brands

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed