Senior Manager, Internal Controls & SOX Readiness

Triumph • San Francisco, CA

7h • $180,000 - $220,000 • Onsite

About The Position

Triumph is hiring a Senior Manager, Internal Controls & SOX Readiness, to build and lead its internal controls and SOX program from the ground up. Reporting to the VP, Accounting & Corporate Controller and working closely with the Assistant Controller, this role will design controls within Triumph’s newly implemented NetSuite environment, define SOX scope, build the risk and control matrix, and prepare the company for audits under PCAOB standards. The role requires practical judgment about what to document, automate, or leave without a control, and a strong understanding of ITGCs in a modern data stack where financially relevant information flows through automated pipelines and third-party payment processors.

The Senior Manager will own the end-to-end SOX program, from risk assessment and control design through implementation, testing, deficiency identification, and remediation. They will be the primary contact for external auditors, coordinate walkthroughs and testing support, and defend the program’s scope with evidence and judgment. They will also oversee third-party SOX consultants while retaining internal ownership of decisions, educate control owners, and report program status and remediation progress to senior leadership and auditors.

First-year goals include designing NetSuite controls for user roles, segregation of duties, and approval workflows; delivering a scoping memo and risk and control matrix within the first 90 days; completing walkthroughs and design assessments for all in-scope processes ahead of audits; establishing a SOC 1 review process for key service providers; and creating a right-sized program that internal leaders can rely on without a consultant present. The position is in-office five days a week.

Requirements

• At least 6 years of experience in internal controls, SOX compliance, or external audit.
• At least 3 years of in-house experience at a public or pre-IPO company as the accountable owner of some or all of ICFR.
• Experience participating in at least one external audit, as either an auditor or auditee.
• Experience in an environment where financially relevant data flows through automated pipelines, and practical understanding of ITGCs in a modern data stack.
• Working command of COSO 2013 Internal Control–Integrated Framework, COBIT for ITGCs, PCAOB AS 2201, SEC guidance on SOX 302/404, and the IIA’s International Professional Practices Framework.
• Demonstrated judgment in rightsizing controls, including examples of controls simplified or removed and successfully defended against external-auditor pushback.
• Ability to move cross-functional stakeholders without formal authority.
• Comfort presenting to senior leadership.
• Strong documentation skills, including producing clear, auditor-ready narratives and control matrices.
• Able to work in the office five days a week.

Nice To Haves

• Big 4 or equivalent risk advisory foundation.
• In-house experience through an IPO transition, with exposure to both sides of the process.
• Experience in fintech, lending, or payments.
• CPA license or equivalent certification such as CIA or CISA.
• Hands-on experience with AuditBoard or Workiva, or sufficient SQL fluency to review evidence directly.

Responsibilities

• Scope, build, own, and manage Triumph’s end-to-end SOX program, including risk assessment, control design and implementation, testing, deficiency identification, and remediation.
• Build and maintain Triumph’s risk control matrix and risk-based audit plan, documenting workflows that feed the financial statements.
• Design controls in the NetSuite environment, including controls over user roles, segregation of duties, and approval workflows.
• Coordinate with external auditors on SOX matters, including walkthroughs, testing support, issue resolution, and defending established scope boundaries.
• Prepare and present program updates to the VP, Accounting & Corporate Controller, C-suite, and external auditors, including status reports, deficiency summaries, and remediation progress.
• Build SOX awareness by educating control owners about their responsibilities and the importance of a controlled environment.
• Identify opportunities to streamline and automate controls as systems and processes evolve.
• Direct third-party SOX consultants, ensuring quality while keeping program decisions internally owned.
• Establish a SOC 1 review process covering key service providers.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed