Senior Manager, SOX IT Compliance

Papa John's•Atlanta, GA

About The Position

The Senior Manager of IT SOX Compliance leads Papa John’s enterprise-wide IT SOX compliance program, reporting to the Director of SOX Compliance. The role focuses on governance, risk assessment, control design evaluation, and program oversight. The SOX team does not perform control testing; instead, this position owns and advises on the program, oversees risk and control design, coordinates with control owners, facilitates remediation and training, and partners with Internal Audit and external auditors. The Senior Manager advises the business on the SOX implications of new business initiatives, system implementations and development life cycle controls, IT policy changes, and personnel changes. The role also maintains program documentation, supports process owners, facilitates deficiency remediation, reviews SOC reports, advances control automation and monitoring, and communicates program status, issues, and risks to leadership and governance committees.

Requirements

Bachelor’s degree in Information Systems, Accounting, Finance, or a related field.
At least 8 years of relevant experience, including IT SOX, IT audit, or risk management at a public company or Big 4/public accounting firm.
Strong understanding of SOX 404, COSO, COBIT, and PCAOB standards.
Proficiency in annual and rolling SOX scoping based on risk factors and materiality.
Deep understanding of IT General Controls (ITGCs).
Competence in identifying and assessing application controls, key reports, and interface controls.
Skill in documenting IT processes, process and data flows, and risk and control matrices (RCMs).
Strong project management capabilities for managing timelines, milestones, and dependencies.
Familiarity with ERP systems such as Oracle Cloud, NetSuite, or PeopleSoft.
Ability to review SOC 1 reports and assess reliance on third-party controls.
Ability to translate complex IT and control concepts into business-friendly language.
Team-oriented, process-focused approach with excellent interpersonal, analytical, and problem-solving skills.
Critical thinking skills and ability to complete tasks with an appropriate level of skepticism.
Ability to travel 15–20% on average annually.
Ability to work remotely with team members in multiple locations.

Nice To Haves

Relevant professional certification preferred, such as CISA, CISSP, CISM, or CRISC.
Experience with audit software such as AuditBoard.

Responsibilities

Lead the company’s IT SOX compliance program and ensure technology- and data-related financial reporting risks are appropriately mitigated.
Provide guidance on new business initiatives, system implementations and SDLC controls, IT policy changes, and personnel changes, assessing their impact on the SOX compliance program.
Conduct and update risk assessments and scoping, particularly for systems supporting financial reporting and revenue recognition.
Partner with stakeholders in IT, Finance, and Internal Audit to maintain strong control design and accountability.
Maintain and oversee SOX documentation, including risk and control matrices, process and data flows, and system diagrams.
Support process owners through training, review, and guidance on processes including IT General Controls, IT Operations, and SOC Reporting.
Facilitate deficiency management and remediation, from root cause analysis through readiness for retesting.
Support implementation of automation and continuous control monitoring as part of control enhancement efforts.
Manage review of SOC reports and mapping to complementary user entity controls (CUECs).
Track and communicate program status, issues, and risks to the Director of SOX Compliance; prepare reports for the SOX Steering Committee and Audit Committee.
Monitor emerging IT compliance risks, including cybersecurity threats that could affect SOX controls.
Perform other duties as assigned.