Senior Internal Auditor & Sox Compliance

SunPower•Orem, UT

1d•Remote

About The Position

The Senior Internal Auditor – SOX Compliance will play a key role in the Company’s SOX compliance and Internal Audit program, with primary responsibility for executing risk-based SOX testing, evaluating internal controls over financial reporting (ICFR), identifying control gaps, and supporting timely remediation. The position partners with Accounting, Finance, IT, Legal, HR, Operations, and external auditors to strengthen the control environment and promote sustainable, scalable controls.

Requirements

Bachelors degree in Accounting, Finance, Internal Audit, Information Systems, or related field.
4-7 years of progressive Internal Audit, SOX, public accounting, or related experience.
Strong understanding of SOX Section 404 and COSO.
Experience with walkthroughs, control testing, and audit workpapers.

Nice To Haves

Public company SOX and Big 4 experience preferred.
ITGC, application controls, ERP, and day analytics experience preferred.

Responsibilities

Execute the annual SOX 404 program in line with COSO and Company policies, including walkthroughs, risk/control-gap identification, and testing of key controls for design and operating effectiveness.
Maintain SOX documentation (RCMs, narratives, flowcharts, control descriptions, and workpapers), and evaluate deficiencies, severity, and remediation with follow-up testing.
Perform risk-based financial and operational audits across core cycles (Procure-to-Pay, Order-to-Cash, Revenue Recognition, Close & Reporting, Treasury, Payroll/Hire-to-Retire, Fixed Assets, Inventory, Commissions, Equity Compensation, Forecasting, and Expense Management), including compliance, fraud-risk, and process-improvement reviews.
Test IT general and application controls—access/provisioning/termination, periodic and privileged access reviews, segregation of duties, change management, automated controls, interfaces, system-generated calculations, IT-dependent controls, and IPE—across ERP and business systems (NetSuite, Salesforce, Paycom).
Contribute to annual enterprise and SOX risk assessments, identify emerging risks, and support development of the Internal Audit plan, including risks from new systems, processes, acquisitions, and organizational change.
Apply data analytics and continuous monitoring to expand coverage, perform population-based testing, detect anomalies, and build dashboards and recurring monitoring procedures, leveraging approved automation and AI tools.
Document findings, perform root-cause analysis, partner with management on corrective actions, and track/escalate issues through validation.
Coordinate with external auditors, providing SOX evidence and supporting alignment on key controls, testing strategy, sampling, deficiencies, and remediation.
Provide Internal Audit input on major system implementations and upgrades (e.g., NetSuite SOX readiness), assess controls in new systems and processes, and identify opportunities to automate manual controls and improve efficiency.