Head of SOX and Internal Controls
You will design, maintain, and scale the SOX business process control framework across in-scope entities and processes. You will lead risk assessments and scoping, design and implement manual, automated, and IT-dependent controls, and drive timely remediation of deficiencies. You will collaborate with finance, operations, product, and engineering to embed controls into end-to-end processes, coordinate with internal and external auditors, champion automation and data-driven monitoring, report status and risks to senior leadership, and build and develop a high-performing SOX business controls team. You will also demonstrate responsible use of generative AI tools where appropriate.
Responsibilities
- Own the SOX business controls framework
- Define and maintain scoping, risk assessment, control design standards, and documentation requirements
- Ensure the SOX program aligns with business activities, new products, system changes, and regulatory expectations
- Oversee annual SOX risk assessment, scoping, and materiality determinations for business processes
- Design and implement key and non-key business controls including manual, automated, and IT-dependent controls
- Drive timely remediation of control deficiencies and implement sustainable corrective actions
- Collaborate with finance, operations, technology, tax, treasury, compliance, legal, and engineering to embed controls into end-to-end processes
- Influence product and system design to build in controls and auditability
- Serve as the primary liaison with internal and external auditors for SOX testing and evidence requests
- Identify opportunities to streamline, standardize, and automate controls and champion data-driven monitoring and analytics
- Provide regular updates on SOX status, key risks, and remediation progress to senior leadership and establish governance forums
- Build, lead, and develop a high-performing SOX business controls team
Requirements
- 12+ years of experience in SOX, internal controls, internal audit, or risk management with public company exposure
- Technical understanding of SOX 404, PCAOB standards, and COSO framework
- Experience leading large-scale SOX or controls programs and cross-functional initiatives
- Proven ability to influence senior leaders without direct authority
- Deep knowledge of finance and operational processes including revenue recognition, financial reporting, procurement, disbursements, payroll, and digital asset safeguarding
- Excellent communication skills able to translate complex control concepts for non-experts
- Professional certification such as CPA, CA, CIA, CISA, or CRMA
- Experience in high-growth technology-driven or financial services, crypto, or fintech companies
- Familiarity with ERP systems, subledgers, workflow tools, RPA, data analytics, and continuous control monitoring
- Experience managing SOX in multi-jurisdictional or multi-entity global environments
- Leadership competencies including strategic mindset, operational excellence, change leadership, and talent building
Benefits
- Medical
- Dental
- Vision
- 401(k)
- Equity
- Bonus eligibility