ITGC SOX Director

Astera Labs•San Jose, CA

55d

About The Position

Astera Labs is looking for an experienced leader of ITGC SOX. This position will lead our SOX environment related to all in scope financial IT systems. The ideal candidate will have a robust background in systems support and extensive experience managing IT SOX at a public company. This role demands a proactive individual who can seamlessly liaise with auditors, collaborate with cross-functional teams, and ensure compliance with SOX regulations.

Requirements

10+ years experience in internal controls, SOX or related accounting activities preferably in semiconductor or other manufacturing environment.
Expert knowledge of IT systems, networks, and databases, and familiarity with internal control frameworks such as COBIT, COSO, and NIST.
A background in IT audit, internal audit, or SOX compliance, with experience in a public accounting firm being particularly valuable.
Thorough knowledge of SOX guidelines
Ability to assess risks, identify control weaknesses, and analyze large datasets.
Excellent organization and communication skills, comfortable working with external auditors, IT teams and management
Strong understanding of business processes and financial transaction flows
High attention to detail
Certifications: Professional certifications are often preferred or required, such as Certified Information Systems Auditor (CISA), Certified Public Accountant (CPA), or Certified Internal Auditor (CIA).

Responsibilities

Designing and maintaining an effective controls environment for all SOX in scope systems.
Responsible for designing effective controls over logical access, change management, data backup and recovery and IT operations with primary focus supporting the financial reporting process.
Evaluate application controls (ITAC) that ensures the accuracy and completeness of financial transactions.
Maintain a list of key reports, identify standard vs custom reports and test key reports as needed.
Preparing quarterly user access reviews and change audit log reviews.
Obtain and evaluate SOC1 reports and map CEUCs to related business controls.
Maintain documentation in standard Risk Control Matrix (RCM) format.
Conduct walkthroughs of RCMs with external auditors to demonstrate proficiency in design of effective controls.
Design annual test plans and perform testing throughout the year to demonstrate controls are operating effectively.
Identify ineffective controls and work with management to determine appropriate remediation and manage the remediation process.