Manager, IT SOX Compliance & Risk

Genesys•Virtual Office (Texas), TX

2d•$124,600 - $219,200•Hybrid

About The Position

As an IT SOX Compliance & Risk Manager at Genesys, you will play a key role in supporting the organization's IT Sarbanes-Oxley (SOX) compliance program by helping maintain effective IT General Controls (ITGCs), automated controls, and IT-dependent manual controls across critical business systems. You will partner closely with Technology, Security, Finance, Internal Audit, and external auditors to support compliance activities, assess technology risks, review third-party controls, and strengthen the overall control environment. This role requires strong knowledge of SOX compliance, IT governance, cloud technologies, cybersecurity controls, third-party risk management, and risk management practices, along with the ability to collaborate effectively across cross-functional teams to drive compliance, operational excellence, and continuous improvement.

Requirements

Bachelor's degree in Information Systems, Information Technology, Computer Science, Accounting, Finance, or a related field.
Experience leading teams, mentoring professionals, or coordinating the work of analysts, consultants, or contractors in compliance, audit, or risk management environment.
5 to 8+ years of experience in IT audit, SOX compliance, IT risk management, cybersecurity governance, or related disciplines.
Experience supporting SOX programs within a public company, SaaS organization, or consulting environment.
Strong understanding of SOX Section 404, COSO, COBIT, NIST, and IT governance frameworks.
Experience assessing and testing IT General Controls (ITGCs), automated controls, and IT-dependent manual controls.
Experience evaluating logical access controls, user access reviews, privileged access management, change management, and SDLC controls.
Experience reviewing SOC 1 reports, evaluating complementary user entity controls (CUECs), and assessing third-party risks within a SOX compliance environment.
Familiarity with enterprise technologies such as Salesforce, Oracle Fusion Cloud, ServiceNow, GitHub, AWS, Azure, Workday, Okta, Active Directory, and identity governance platforms such as SailPoint or Saviynt.
Knowledge of cloud security concepts, cybersecurity governance practices, third-party risk management, and technology risk management principles.
Experience utilizing GRC platforms and workflow tools such as ServiceNow, AuditBoard, Workiva, Archer, or similar solutions.
Experience supporting internal and external audit engagements, issue remediation efforts, and control optimization initiatives.
Strong analytical, organizational, and project management skills with the ability to manage multiple priorities effectively.
Excellent communication and interpersonal skills with the ability to collaborate across technical and non-technical teams.
Ability to influence stakeholders, build relationships, and support cross-functional initiatives in a dynamic environment.

Nice To Haves

Professional certifications such as CISA, CRISC, CISSP, CPA, or equivalent preferred.
Experience working within a cloud-based SaaS environment.
Familiarity with identity governance, access certification, privileged access management, and compliance automation initiatives.
Experience supporting enterprise system implementations, cloud migrations, or technology transformation programs.
Experience leveraging data analytics, continuous monitoring, or automation solutions within compliance and audit programs.
Understanding of emerging technology risks, cybersecurity frameworks, cloud governance best practices, and vendor risk management processes.

Responsibilities

Manage IT SOX compliance activities and execution of the SOX program to support compliance with SOX Section 404 requirements and organizational objectives.
Lead annual SOX scoping, risk assessments, control design evaluations, testing activities, and remediation efforts while partnering with business and technology stakeholders to strengthen the overall control environment across IT General Controls (ITGCs), automated controls, and IT-dependent manual controls.
Oversee logical access governance activities, including user provisioning and deprovisioning, access reviews, privileged access management, segregation of duties, and identity governance processes.
Assess risks and controls related to software development lifecycle (SDLC), change management, DevOps processes, source code repositories, and cloud deployment activities.
Lead third-party compliance and technology risk assessments through the review of SOC reports, evaluation of vendor controls, identification of control gaps, and coordination of remediation activities.
Lead cross-functional coordination with Internal Audit, External Audit, Security, Engineering, Finance, and business process owners to drive compliance objectives, audit readiness, and remediation outcomes.
Provide guidance on IT governance, risk, and control frameworks (COSO, COBIT, NIST), conduct technology risk assessments, and monitor emerging cybersecurity and regulatory risks to strengthen the compliance program.
Evaluate the impact of system implementations, cloud migrations, organizational changes, and technology initiatives on the SOX control environment and associated technology risks.
Develop and maintain compliance documentation, risk assessments, remediation plans, metrics, and management reporting to support audit readiness and stakeholder communication.
Leverage data analytics, automation, and continuous monitoring techniques to improve control effectiveness, testing efficiency, audit readiness, and compliance reporting.
Lead compliance program planning activities, including annual testing strategies, compliance testing schedules, resource allocation, project prioritization, and execution oversight for SOX compliance and technology risk initiatives.
Evaluate compliance and technology risk issues, determine risk severity and business impact, establish remediation priorities, provide risk-based recommendations to management, and escalate significant control deficiencies and risks to leadership as appropriate.
Monitor remediation activities, track progress against established milestones, and drive timely resolution of control deficiencies through collaboration with control owners and technology stakeholders.
Provide day-to-day leadership, coaching, and work prioritization for compliance analysts, contractors, or cross-functional compliance resources supporting SOX and technology risk initiatives.
Develop and present compliance metrics, program status updates, risk trends, audit results, and remediation progress reports to senior leadership and key stakeholders.
Provide compliance guidance, training, and awareness programs to technology teams, control owners, and stakeholders to support effective control execution and risk management practices.
Drive continuous improvement initiatives to enhance the effectiveness, efficiency, and maturity of the SOX compliance and technology risk management program.