Senior Manager, SOX

Corcept Therapeutics•Redwood City, CA

2d•$193,770 - $227,880•Hybrid

About The Position

The Senior Manager, SOX supports the Director, SOX in managing and continuously improving Corcept’s Sarbanes-Oxley compliance program, with a focus on internal controls over financial reporting, IT general controls, automated controls, key reports, interfaces, and third-party service organizations. The role works closely with Finance, Internal Audit, Information Technology, business process owners, and external auditors to maintain an effective, risk-based control environment. It also leads remediation activities, advises on systems and business changes, develops team capabilities, and communicates program status and emerging risks to the Director, SOX. This is a hybrid role requiring on-site presence three days per week. Occasional travel on an ad hoc basis may be required.

Requirements

Strong knowledge of internal control frameworks and requirements applicable to internal control over financial reporting, including SOX, PCAOB standards, and risk-based audit practices.
Demonstrated experience with IT general controls, automated controls, key reports, interfaces, SOC 1 reports, and complementary user entity controls.
Proven ability to evaluate control design and operating effectiveness, assess deficiencies, and guide remediation.
Experience with ERP systems, financial applications, identity and access management tools, reporting platforms, and governance, risk, and compliance technology.
Experience with system implementations, data migrations, and transformation initiatives affecting financial reporting.
Ability to interpret SSAE 18 reporting requirements, assess report scope and coverage periods, and evaluate the effect of service-auditor findings on the company’s control environment.
Strong project management, analytical, organizational, and problem-solving skills, with the ability to manage competing priorities and deadlines.
In-depth understanding of business processes and financial transaction flows.
Strong collaborative skills and demonstrated success working with cross-functional teams.
Excellent verbal, written, and interpersonal communication skills, including the ability to explain complex control matters clearly to technical and nontechnical stakeholders.
Self-motivated and proactive, with the ability to learn new systems, processes, and technical requirements quickly.
Ability to exercise sound judgment and deliver high-quality work with limited supervision in a fast-moving environment.
Strong computer skills, including Microsoft Word, Excel, and PowerPoint.
Applicants must be currently authorized to work in the United States on a full-time basis.

Nice To Haves

Bachelor’s degree in Accounting, Finance, Information Systems, Business, or a related field.
CPA, CIA, CISA, or another relevant professional certification.
Eight or more years of progressive experience in SOX compliance, internal audit, external audit, IT audit, or internal controls, including experience in the biotech industry.
Big Four public accounting or similar experience.
Experience with accounting software such as NetSuite and Coupa, and with a 3PL business model.

Responsibilities

Coordinate the annual SOX 404 program, including internal control risk assessment, planning, PBC audit request coordination and collection, and scheduling walkthroughs and operating-effectiveness testing for financial processes and in-scope IT applications.
Maintain and review the Risk Control Matrix, process narratives, flowcharts, and supporting workpapers to ensure clear linkage among financial reporting risks, controls, and audit evidence.
Lead walkthroughs and control testing across logical access, change management, computer operations, backup and recovery, system development life cycle activities, automated system controls, configurations, batch jobs, interfaces, and key reports.
Evaluate control deficiencies, determine root causes and potential impact, support severity assessments, and work with control owners to develop remediation plans and monitor open deficiencies.
Maintain the inventory of key reports for in-scope applications, including report ownership, control linkage, and testing status.
Advise process owners on SOX governance requirements for new systems, upgrades, and significant process changes, including control ownership, documentation, approval requirements, and post-implementation monitoring.
Develop and deliver training on SOX, internal controls over financial reporting, IT risk, documentation standards, and control-owner responsibilities.
Lead the SOX workstream for new ERP implementations and newly in-scope business processes, including control redesign, documentation, testing, and readiness assessments.
Perform annual segregation of duties analysis and fraud risk assessment.
Maintain close working relationships with management to develop a deep understanding of financial, IT, and entity-level controls.
Assist internal and external auditors during the SOX audit process by aligning on testing approaches, coordinating requests, providing documentation, addressing questions, reducing unnecessary duplication, and supporting timely audit completion.
Review execution and documentation of recurring system-related controls, including quarterly user access reviews, system change reviews, and key report change reviews.
Obtain and evaluate SOC 1 reports for significant service providers, identify applicable complementary user entity controls, and assess exceptions and coverage gaps.
Identify opportunities to streamline and strengthen the internal control environment, and communicate and monitor resulting recommendations.
Perform special project work and other procedures as necessary.
Maintain technical proficiency and current knowledge of professional standards, including accounting, auditing, and financial reporting requirements.