Senior SOX Analyst

Steelcase • Grand Rapids, MI

20h • Hybrid

About The Position

The Senior SOX Analyst leads the maintenance and execution of IT controls and compliance programs to meet regulatory requirements, improve risk posture, and support strategic initiatives. The role coordinates SOX compliance, General IT Controls (GITCs), data privacy requirements, and third-party risk management, and serves as a liaison among IT, business stakeholders, and internal and external audit partners.

The position conducts risk assessments and reviews, maintains the enterprise IT risk register, recommends mitigation strategies, and tracks remediation. It works with control owners to ensure controls are designed, documented, tested, and operating effectively; communicates issues and action plans to leadership; and manages governance, risk, and compliance platform workflows. The analyst also supports employee compliance education, advances organizational GRC and control maturity, and mentors peers.

Requirements

• Bachelor's degree in Computer Science, Information Systems, Finance, Accounting, or a related field, or equivalent experience.
• Five or more years of experience in Information Systems Audit, IT Risk Assurance, Internal Audit, External Audit, or a related discipline.
• Five or more years of experience supporting SOX compliance, Internal Control over Financial Reporting (ICFR), and PCAOB standards.
• Experience designing, testing, evaluating, and improving IT controls in complex enterprise environments.
• Strong knowledge of governance, risk, and compliance frameworks, including SOX, NIST CSF, COBIT, GDPR, CCPA, and related standards.
• Strong analytical and problem-solving skills, including the ability to evaluate large amounts of information and communicate meaningful insights.
• Excellent interpersonal and communication skills, including the ability to explain technical concepts to non-technical audiences.
• Authorization to work in the United States on a full-time basis; the employer will not sponsor work authorization or visas.

Nice To Haves

• Professional certifications such as CISA, CISSP, CRISC, CISM, or related credentials.
• Experience with cloud environments, legacy on-premises technologies, and complex enterprise architectures.
• Experience reporting compliance and risk assessment results to leadership through clear, effective written communication.
• Experience with Governance, Risk, and Compliance (GRC) platforms and workflow management.
• Experience supporting privacy programs and requirements, including GDPR, CCPA, or similar frameworks.
• Experience with third-party risk management and vendor assessments.
• Experience collaborating with external auditors and consulting firms, including Big Four audit organizations.
• Strong facilitation and stakeholder management skills across multiple business functions.
• Proficiency with Microsoft Office tools, including Word and Excel.
• SQL experience.
• Self-motivation, a continuous learning mindset, and ability to adapt in a fast-moving environment.

Responsibilities

• Lead the maintenance and execution of IT controls and compliance programs.
• Own and coordinate activities related to SOX compliance, General IT Controls (GITCs), data privacy requirements, and third-party risk management.
• Serve as a primary liaison among IT, business stakeholders, and internal and external audit partners.
• Conduct risk assessments, framework assessments, policy and procedure reviews, operational reviews, vendor evaluations, contract reviews, and audit activities.
• Maintain and enhance the enterprise IT risk register, identify emerging risks, recommend mitigation strategies, and track remediation efforts.
• Communicate risk, compliance, and control issues to leadership and help develop action plans to address gaps.
• Work with control owners to ensure controls are appropriately designed, documented, tested, and operating effectively.
• Manage workflows in Governance, Risk, and Compliance platforms supporting controls, risk, privacy, compliance, and audit activities.
• Support employee compliance awareness, education, and training initiatives.
• Provide thought leadership to advance governance, risk, compliance, and control maturity.
• Mentor peers and build organizational capability through knowledge sharing and collaboration.

Benefits

• Competitive wages and benefits.
• Flexible hybrid work schedule, with the office as the primary place of work.
• Continuous learning opportunities.
• Inclusive culture where employees feel seen, heard, and valued.
• Opportunity to make a meaningful impact through work and the company's commitment to innovation, integrity, and continuous improvement.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior