Supervisor, SOX Compliance

BlueCross BlueShield of South Carolina•Columbia, SC

1d•Onsite

About The Position

The Supervisor, SOX Compliance supervises the daily activities of the Model Audit Rule (MAR/SOX) Department and its compliance program, which supports annual reporting to the Department of Insurance. The role oversees activities including risk assessments, process documentation, identification of risks and key controls, control testing, deficiency reporting and evaluation, and periodic reporting to management, steering and executive committees, and the Department of Insurance. This is a full-time, onsite position in Columbia, South Carolina, at 51 Clemson Road. The supervisor guides staff in developing, implementing, and carrying out an internal control compliance program to test and ensure the effectiveness of the control environment. The role directs staff work, participates in candidate selection, completes performance evaluations, addresses performance issues, and takes appropriate disciplinary action. The position supervises the design and documentation of required entity-level, transaction-based, and system-based controls, including narratives, process diagrams, control descriptions, risk and control matrices, and test plans. In cooperation with operational teams and process owners, the supervisor provides recommendations on control implementation and design, reviews auditor recommendations, and escalates matters requiring management intervention. The role also performs a comprehensive, top-down, risk-based company-wide assessment; maps in-scope financial statement line items to applicable processes and key controls; and evaluates risk, scope, and timing for lines of business and companies required to comply with SOX/MAR. It determines risk levels and impacts across lines of business and companies.

Requirements

Bachelor's degree in a job-related field.
Five years of experience in auditing, Sarbanes-Oxley/MAR, compliance, accounting/financial, or Information Systems.
Two years in a lead auditor or project leader role, or equivalent military experience at grade E4 or above; this experience may be concurrent.
Proficient knowledge of risk management methodologies, SOX or MAR, the COSO framework, the COBIT framework, PCAOB, internal control concepts, GAAP, financial controls, process analysis, and risk assessments.
Strong interpersonal, oral, and written communication skills.
Strong project management, planning, and organizational skills.
Proactive and responsible, with the ability to work with all levels across the organization.
Ability to work independently and in a team environment.
Excellent analytical and problem-solving skills.
Ability to perform under tight deadlines and prioritize effectively.
Proficiency with Microsoft Office, Adobe, and Access or other databases.

Responsibilities

Supervise and guide staff in developing, implementing, and performing an internal control compliance program.
Oversee control testing and activities to ensure the effectiveness of the control environment.
Report control deficiencies, propose and approve remediation plans, and evaluate deficiencies for annual reporting to the Department of Insurance.
Direct day-to-day staff activities and assign work according to staff skillsets and availability to meet departmental goals on time.
Participate in candidate selection, complete performance evaluations, address performance issues, and take appropriate disciplinary action up to and including termination.
Supervise and direct the design and documentation of entity-level, transaction-based, and system-based controls, including narratives, process diagrams, control descriptions, risk and control matrices, and test plans.
Collaborate with operational teams and process owners on control documentation for management review and approval.
Recommend control implementation and design improvements.
Review auditor recommendations and escalate items requiring management intervention.
Perform a comprehensive, top-down, risk-based company-wide risk assessment.
Map each in-scope financial statement line item to applicable processes and key controls.
Evaluate risks, scope, and timing for lines of business and companies required to comply with SOX/MAR.
Determine risk levels and impacts for each line of business and company, including how they affect one another for each evaluated process.
Oversee risk assessments, process documentation, identification of risks and key controls, control testing, and periodic reporting to management, steering and executive committees, and the Department of Insurance.