IT SOX Compliance Senior Manager

The IT SOX Compliance Senior Manager plays a critical role in ensuring that the Company’s IT environment maintains strong internal controls. This role is responsible for strategic leadership and oversight of the IT SOX compliance program as well as partnering with cross functional teams to mitigate risks. This position requires working onsite in Alameda, California 80% of the time.

Responsibilities

Responsible for strategic leadership, oversight, and day-to-day management of the IT SOX compliance program; Oversee IT risk assessment and scoping process to ensure alignment with financial reporting risks; Review control documentation and collaborate with control owners to ensure execution of processes and documentation are adequate; Partner with internal audit, external audit, and control owners to coordinate ITGC and ITAC control testing and timely resolution of control related matters; Support new systems implementations and technology changes to ensure SOX requirements are incorporated; Provide training and guidance to IT control owners on SOX expectations, documentation standards, and audit readiness; Identify opportunities to improve the SOX program through automation, metrics, tools, and process improvements; Adhere to the Company’s Quality Management System (QMS) as well as domestic and global quality system regulations, standards, and procedures; Understand relevant security, privacy, and compliance principles and adhere to the regulations, standards, and procedures that are applicable to the Company; Ensure other members of the department follow the QMS, regulations, standards, and procedures; Perform other work-related duties as assigned

Requirements

Bachelor’s degree in accounting or information systems, with 8+ years' experience in IT SOX compliance, Information Security or IT Risk Management, or an equivalent combination of education and experience

Nice to have

CISA, CIA, or CPA certification is strongly preferred; Deep knowledge of SOX 404, ITGCs, ITACs, and COSO-based internal control frameworks; Expertise in SAP environments, including knowledge of SAP Security and Basis; Experience evaluating technology risk within a Big 4 public accounting firm preferred; Experience implementing or managing GRC platforms; Technical understanding of IT operations including cloud security architectures, DevOps practices, and complex logical access management; Strong oral, written and interpersonal communication skills; High degree of accuracy, attention to detail and strong problem-solving skills

Benefits

Competitive compensation package plus benefits and equity program when applicable; Collaborative teamwork environment where learning is constant and performance is rewarded; Opportunity to be part of the team that is revolutionizing the treatment of some of the world's most devastating diseases; Generous benefits package for eligible employees that includes medical, dental, vision, life, AD&D, short and long-term disability insurance, 401(k) with employer match, paid parental leave, eleven paid company holidays per year, a minimum of fifteen days of accrued vacation per year, and paid sick time