SOX Manager

BILL•San Jose, CA

10h•$97,200 - $142,500•Hybrid

About The Position

The SOX Manager for Business Process and IT Application Controls (ITAC) is a critical, highly visible role on the Finance team responsible for the day-to-day execution and continuous improvement of the company’s Sarbanes-Oxley (SOX) Section 404 compliance program. As our business experiences tremendous growth, this individual will act as a key partner to business process and ITAC owners, ensuring a robust Internal Control over Financial Reporting (ICFR) environment and be responsible for working with different business stakeholders on maintaining the SOX controls. The ideal candidate is a motivated, self-starting leader with a strong background in public accounting and internal controls. You will not just manage compliance, but actively drive process optimization, automation, and cross-functional risk management.

Requirements

Bachelor’s degree in Accounting, Finance, or a related field.
Minimum of 7+ years of progressive experience in Big 4 public accounting (Audit or Risk Advisory), specifically focused on SOX 404 audits and ICFR for large accelerated filers.
Strong familiarity with high-growth environments (Fintech or technology sector experience is a major plus).
Active Certified Public Accountant (CPA) or Certified Internal Auditor (CIA) is strongly preferred. CISA is a plus.
Deep understanding of SOX Section 404 requirements, the COSO framework, and PCAOB auditing standards.
Experience navigating and evaluating controls within major ERP and enterprise systems (e.g., NetSuite) is highly desirable.
Strong conceptual and problem-solving skills with meticulous attention to detail.
Proven ability to manage multiple projects simultaneously, manage timelines, and deliver high-quality results under pressure.
Excellent interpersonal and communication skills, with the ability to translate complex control requirements into clear, actionable guidance for non-financial stakeholders.
A self-starter who can work independently while maintaining strong alignment with a broader team goal.
Applicants must have authorization to work in the United States without requiring visa sponsorship now or in the future.

Nice To Haves

Fintech or technology sector experience is a major plus.
CISA is a plus.

Responsibilities

Lead the execution of the annual SOX compliance lifecycle for business processes and ITAC, including scoping, risk assessment, documentation (narratives, flowcharts, Risk & Control Matrices), testing coordination, and deficiency remediation.
Perform the annual qualitative and quantitative risk assessment to identify significant accounts, relevant assertions, and key controls, proactively adjusting the SOX scope to reflect business growth or process changes.
Serve as the business process and ITAC primary point of contact and liaison between management, control owners, Internal Audit, and the External Auditors for all SOX-related matters to ensure a co-ordinated, efficient, and cost-effective audit process.
Evaluate control deficiencies/process enhancements and partner closely with business process and ITAC owners to develop actionable remediation plans and track progress to ensure timely resolution.
Drive a continuous improvement mindset by identifying opportunities to streamline operations, eliminate redundant controls, and increase the utilization of automated controls or GRC tools.
Act as a trusted advisor to business process and ITAC owners providing guidance, coaching, and training on control responsibilities.
Proactively assess and manage the SOX impact of new financial systems, workflow updates, or corporate transformation initiatives.
Support the development and alignment of policies to ensure harmonized processes across all business units.
Serve as the business process and ITAC primary point of contact and liaison between management, control owners, Internal Audit, and the External Auditors for all SOX-related matters (e.g. walkthroughs, evidence gathering, follow-ups) to ensure seamless, cost-effective audit process.
Manage the SOX project timeline, tracking milestones and managing external auditors, as needed.
Prepare regular status updates, control deficiency summaries, and remediation progress reports for the management.