Sr. IT SOX Governance Lead

PlayStation•San Diego, CA

6d•Hybrid

About The Position

Sony Interactive Entertainment (SIE), the company behind the PlayStation brand and a subsidiary of Sony Group Corporation, is seeking an experienced and strategic Sr. IT SOX Governance Lead for DTIS Global Service Operations (GSO). This role establishes and drives end-to-end ownership of IT SOX governance, including IT General Controls (ITGC) governance, control framework ownership, audit coordination, onboarding new systems, and standardizing governance across the enterprise. The position supports the growth of SIE’s IT governance capabilities, reduction of operational risk, and development of sustainable compliance operations. The successful candidate will combine deep SOX and ITGC expertise with governance leadership, operational execution, and cross-functional collaboration. The role owns the IT SOX governance framework and ITGC program; establishes standardized processes, methodologies, and control-design practices; and leads ITGC lifecycle activities including design, implementation, system onboarding, testing support, remediation tracking, and reporting. It also maintains control documentation, coordinates internal and external audits, assesses risks and control gaps, monitors governance performance, and works with technical, operational, Finance Governance, Risk, and Compliance teams. The lead will support alignment with PCI, GDPR, and security governance programs and contribute to automation, continuous monitoring, scalable onboarding, and other governance improvements.

Requirements

Bachelor’s degree in Information Systems, Information Technology, Accounting, Computer Science, or a related field.
At least 7 years of experience in IT SOX, IT audit, IT governance, compliance, or risk management.
Strong expertise in SOX compliance, IT General Controls (ITGCs), and audit coordination.
Experience leading governance programs and working directly with external and internal auditors.
Demonstrated experience with control design, system scope assessments, system onboarding, and remediation management.
Experience with a system implementation framework (SDLC).

Nice To Haves

Big 4 experience supporting SOX audits and IT General Controls (ITGC) assessments.
Professional certifications such as CISA, CISSP, CISM, CRISC, or CPA.
Experience with Optro SoxHub or similar governance or audit platforms.
Strong experience with cloud services and environments, and knowledge of microservices architecture and CI/CD development techniques.
Prior experience auditing SAP ERP systems.
Experience with S/4, GRC, BW, and HANA databases in cloud deployments.
Experience with ITGC reviews of complex architectures across networking, operating systems, databases, applications, and tools, and broad practice with varied technologies.
Experience supporting large-scale enterprise environments and operational governance transformation initiatives.
Experience with process automation and governance tooling.

Responsibilities

Own and manage the IT SOX governance framework and ITGC program.
Establish standardized governance processes, methodologies, and control design practices.
Lead ITGC lifecycle activities, including design, implementation, onboarding, testing support, remediation tracking, and reporting.
Drive governance consistency across systems, applications, and operational teams.
Design, document, and maintain ITGCs and application controls aligned with SOX requirements.
Develop scalable governance standards for onboarding new systems and processes into SOX scope.
Maintain control narratives, process documentation, data flows, and supporting evidence standards.
Partner with control owners to improve control effectiveness and operational maturity.
Serve as the primary IT interface for external and internal audit stakeholders.
Coordinate audit walkthroughs, evidence collection, testing support, and remediation activities.
Manage audit findings, deficiencies, and corrective action plans through resolution.
Ensure timely and accurate delivery of audit artifacts and reporting.
Conduct risk assessments and identify control gaps, process inefficiencies, and governance risks.
Develop remediation and mitigation strategies for identified deficiencies.
Monitor compliance status, control performance, and governance metrics.
Support continuous improvement focused on automation, scalability, and operational efficiency.
Collaborate with engineering, infrastructure, platform operations, Finance Governance (FinGov), and Risk & Compliance teams.
Support alignment between SOX governance and other compliance programs, including PCI, GDPR, and security governance initiatives.
Drive governance accountability and awareness across technical and operational stakeholders.
Identify opportunities for automation and process optimization within SOX operations and evidence management.
Contribute to governance roadmap initiatives, including continuous monitoring capabilities and scalable onboarding models.
Stay current on regulatory requirements, industry trends, and governance best practices.