Technology Internal Controls Supervisor

Southern Company•Atlanta, GA

About The Position

This position is responsible for managing personnel and functions surrounding Southern Company’s technology-related Sarbanes-Oxley (SOX) controls, ensuring all control objectives are achieved to support management’s SOX 404 certification.

Requirements

Bachelor’s degree in Computer Science / Information Security, Information Systems, Accounting or related field required
Minimum of seven years’ experience in financial applications support, technology risk, or compliance (financial controls, technology controls or audit) required.
Strong working knowledge of SOX/internal control concepts and evidence standards as well as application security concepts.
Ability to effectively apply technology knowledge to evaluate SOX control impact and risk associated with key financial applications (KFA), key financial tools (KFTs), and segregation of duties.
Have general understanding accounting concepts and requirements to determine appropriate risk levels of applications and related tools to financial reporting.
Excellent interpersonal, analytical, and organizational skills.
Superior communication skills, both verbal and written to engage, build credibility and maintain relationships with business partners.
Ability to initiate and manage multiple complex projects.
Demonstrate behaviors consistent with company culture – Safety First, Intentional Inclusion, Act with Integrity, Superior Performance.

Nice To Haves

Certified Information Systems Auditor (CISA), Certified Risk and Information Security Controls (CRISC) certifications or related industry certifications preferred.
Leadership experience preferred, including performance management and employee development.
Familiarity with Oracle products and Workiva software a plus.

Responsibilities

Provide leadership in the following areas to support the company’s SOX compliance : Annual SOX risk assessment, scoping and planning for IT-related controls (automated controls, general computing controls, and logical access).
Evaluate the design and operating effectiveness of IT-related controls, including controls around key reports (information used in controls).
Evaluate and document IT SOX control deficiencies, including severity assessment, root cause analysis, exposure analysis, and remediation plans.
Quarterly/annual control certification for IT-related controls.
Assess new applications and tools and/or changes to existing applications and tools for SOX impact.
Provide internal controls leadership for application and tool implementations.
Facilitate the annual SSAE 18 (SOC report) assessments and segregation of duties (SOD) analysis.
Build and maintain strong relationships with control owners and performers in IT and business departments, internal auditors, and external auditors to further enable common goals and efficiencies.
Identify and implement innovative solutions to achieve process efficiencies around controls testing.
Develop and coach direct reports.