About the Role

We are seeking a skilled SOX IT Compliance Consultant to assist an organisation in preparing for and successfully passing a Sarbanes-Oxley (SOX) compliance audit, with a focus on IT systems and processes. The consultant will play a critical role in evaluating IT controls, identifying compliance gaps, and implementing solutions to ensure our IT environment meets SOX requirements. This position requires close collaboration with IT, finance, and audit teams to strengthen our internal control framework over IT systems supporting financial reporting.

Key Responsibilities

• SOX IT Compliance Assessment:
• Conduct a comprehensive assessment of IT general controls (ITGCs) and IT application controls (ITACs) related to SOX compliance.
• Identify potential risks and weaknesses in IT systems, processes, and security that could impact financial reporting.
• Provide a detailed gap analysis and recommend actionable solutions.
• Control Design and Implementation:
• Design and implement IT controls in alignment with SOX requirements and industry standards (eg, COBIT, COSO).
• Focus on areas such as access management, change management, system development, IT operations, and cybersecurity.
• Work with IT stakeholders to integrate controls into existing workflows and ensure sustainability.
• Testing and Validation:
• Perform control walkthroughs and testing to evaluate design and operational effectiveness.
• Document control activities, test results, and any deficiencies identified during assessments.
• Provide guidance on remediation plans and retest controls as necessary.
• Audit Preparation and Support:
• Collaborate with external auditors to facilitate their review of IT controls.
• Ensure timely and accurate responses to auditor inquiries and evidence requests.
• Prepare IT teams for audit readiness and compliance with SOX requirements.
• Documentation and Reporting:
• Create and maintain detailed IT control documentation, including process narratives, control matrices, and risk assessments.
• Develop reports summarising compliance status, key findings, and progress on remediation efforts.
• Present findings and recommendations to IT leadership and senior management.
• Training and Awareness:
• Train IT teams on SOX requirements and the importance of IT controls in financial reporting.
• Promote a culture of compliance and risk awareness across the organisation.

Qualifications and Experience

• Education:
• Bachelor's degree in Information Technology, Computer Science, Information Systems, or a related field.
• Certifications such as CISA, CISSP, CRISC, or equivalent preferred.
• Experience:
• Minimum [X years, eg, 3-5] of experience in IT compliance, SOX audits, or IT risk management.
• Proven experience designing, testing, and remediating IT controls.
• Familiarity with IT governance frameworks such as COBIT and COSO.
• Skills and Knowledge:
• Deep understanding of SOX requirements, ITGCs, and ITACs.
• Proficiency in IT systems, ERP platforms (eg, SAP, Oracle), and audit tools.
• Knowledge of cybersecurity practices, data privacy regulations, and IT risk management.
• Strong analytical, problem-solving, and documentation skills.
• Excellent communication skills to collaborate across technical and non-technical teams.