IT Compliance Lead

FormFactor Inc.

6d

About The Position

The IT Compliance lead owns and drives the company’s IT SOX compliance program while supporting broader IT risk and security compliance initiatives. This role is accountable for the design, execution, documentation, monitoring, and continuous improvement of IT controls supporting financial reporting, and plays a key role in maturing non‑SOX compliance programs. This is a high‑impact, highly visible role that partners closely with IT, Cybersecurity, Finance, Internal Audit, and external auditors to ensure IT controls are effective, efficient, scalable, and audit‑ready. Role Allocation (Approximate) 60% IT SOX Program Ownership (ITGCs, ITACs, & IPE) 40% IT Risk Management & Security Compliance

Requirements

• Bachelor’s degree in information systems, accounting, or related discipline.
• Minimum 3 years of IT audit or IT SOX compliance experience.
• Strong knowledge of SOX, ITGCs, and audit methodology.
• Experience applying IT control frameworks (e.g., COBIT, NIST).
• Strong communication skills to effectively interface with control owners, auditors, and management.
• COBIT
• Detail-Oriented
• Enterprise Resource Planning (ERP) Systems
• Information Technology Infrastructure Library (ITIL)
• Multitasking
• NIST Standards
• Oracle
• Prioritization
• Time Management
• Workday Software
• Minimum of 12 years of related experience with a Bachelor’s degree; or 8 years and a Master’s degree; or a PhD with 5 years experience; or equivalent experience

Nice To Haves

• CISA, CISM, CPA, or equivalent certification.

Responsibilities

• SOX Compliance: Design, document, monitor, and evaluate IT general controls in compliance with both SOX and Company requirements. Identify control weaknesses and provide recommendations for their remediation.
• Risk Assessment: Assist in identifying and evaluating IT risks. Document these risks and collaborate with relevant teams to address them.
• Collaboration: Work closely with IT, finance and audit teams to ensure that IT systems and processes meet regulatory standards, reduce risk, and maintain operational effectiveness. Serve as the primary point of contact for SOX and IT policy related inquiries.
• Control Testing: Document walk-throughs and IT general controls, including change management, access controls, computer operations, and program development.
• Documentation: Maintain detailed work papers describing the work performed, test results and conclusions drawn.
• Training: Provide training and guidance to IT and business teams regarding SOX compliance, internal controls and IT best practices.
• Reporting: Prepare regular reports on the status of SOX compliance, control status, details of control deficiencies, remediation plans, and projects dedicated to control enhancements.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level