Sr. Manager, IT SOX Compliance

Driven Brands Inc.

4d•$103,200 - $184,300•Remote

About The Position

The IT SOX Compliance Sr. Manager is responsible for managing and executing Driven Brands’ IT SOX Compliance program in alignment with Sarbanes-Oxley requirements across the organization. The role serves as a trusted compliance partner to key stakeholders and designs, implements, and monitors IT controls over internal control of financial reporting (ICFR) to support regulatory and audit compliance. It requires expertise in IT General Controls (ITGCs) and IT best practices, with responsibility for communicating and implementing them throughout the organization. The position manages IT SOX documentation and control activities across in-scope systems, applications, and infrastructure, and helps prepare non-in-scope areas for future compliance. It works with control owners and cross-functional teams to monitor effectiveness, remediate issues, support audits and reviews, and improve the overall IT control environment. The position is located in Texas and is identified as remote.

Requirements

At least 10 years of experience in IT audit, IT compliance, or IT SOX compliance, with thorough understanding of ITGC control objectives.
At least 3–5 years in an IT SOX manager capacity.
Strong understanding of SOX Section 404, the COSO framework, and IT control frameworks such as COBIT or NIST.
Ability to manage cross-functional teams and communicate effectively with technical and non-technical stakeholders.
Experience with GRC platforms and audit tools, such as Oracle GRC or AuditBoard.
Experience with cloud environments and SaaS solution SOC evaluations, such as AWS, GCP, or Azure.
Experience with ERP systems, such as Oracle, SAP, or Workday.
Experience with IT tools and infrastructure, such as password vaults, ticketing systems, Single Sign-On, Active Directory, and data warehouses.
Ability to advise, collaborate, and work in a team environment.
Ability to effect change management within the organization.
Highly organized and efficient, able to meet deadlines, and attentive to detail.
Takes ownership and manages and executes work using high-performance attributes.
Bachelor’s degree in Information Systems, Accounting, Finance, or a related field.
At least one required certification or credential: CISA, CIA, CPA, ITIL, CRISC, or similar risk-focused credential.

Responsibilities

Manage and assist in developing and maintaining IT SOX documentation, including process narratives, flowcharts, and risk control matrices, for in-scope SOX systems, applications, and infrastructure, and prepare other areas for IT SOX compliance.
Ensure ITGC control activities are effectively designed and continuously monitor their operating effectiveness.
Coach ITGC control owners on changes needed when controls are ineffective or when people, processes, or technology change.
Assist in creating management responses and due dates for timely remediation solutions.
Participate in audit, certification, and compliance events, including gathering and delivering samples and evidence.
Serve as a liaison between auditors and ITGC control owners to support understanding and timely delivery of audit materials.
Assist with successful completion of User Access Reviews (UARs) and SaaS vendor Service Organization Controls (SOC) reviews.
Assist with tracking IT SOX program KPIs.
Work with IT and other functional teams to define and implement controls and compliance requirements for ITGC objectives.
Evaluate the overall IT control environment to identify and mitigate risk.
Manage and/or execute assigned IT Compliance Program tasks, enhancements, and projects across the organization.