Lead SOX Controls Tester (ITGC)

Lead SOX Controls Tester

Location: Irving, TX 75039

Openings: 1

Shifts/Schedule: 8-5 PM CST

Contract/Perm: 3 month contract with extensions

Must Have:

• 6-8 years of SOX Control Testing experience
• Extensive knowledge of SOX ITGC and ITAC controls
• Must have hands on knowledge with COBIT framework and be familiar with NIST/ COSO
• Expert-level Excel skills (pivot tables, complex formulas)
• Experience conducting UAR (User Access Review) on SailPoint
• Experience reviewing peer work papers and offering feedback
• Experience testing controls of cloud, SAP, and DevOps tools (GitHub, Gitlab, Azure, AWS)
• Experience with one of the Big Four (Deloitte, EY, PwC, KPMG)

Plusses:

• CISA Certification (Certified Information Systems Auditor)
• CISSP Certification (Certified Information Systems Security Professional)

Job Summary:

We are seeking a SOX Controls Tester with deep expertise in ITGC and ITAC to support SOX monitoring efforts across various systems, with a particular focus on testing in SailPoint. This role operates within the first line of defense, contributing to SOX readiness initiatives. The ideal candidate will possess a strong understanding of SOX compliance requirements and the ITGC/ITAC framework, with proven experience in designing, executing, and documenting control testing procedures. Responsibilities include identifying control deficiencies, recommending effective remediation strategies, and managing the end-to-end audit process. Advanced Excel skills are essential, including proficiency with complex formulas, pivot tables, and large datasets. The candidate must also be skilled in scripting languages to extract and analyze data, and capable of troubleshooting issues within automated scripts and data analysis workflows. Strong verbal and written communication skills are critical for documenting findings and collaborating with IT and business stakeholders. A meticulous attention to detail is required to ensure accuracy and thoroughness in all aspects of testing and documentation.