Senior Manager, SOX360
About this role
Employer-provided description, formatted for easier reading.
The Experience
We are seeking a dedicated and forward-thinking Senior Manager to join our management-led SOX 360 Program Office team. The role will report to the Senior Director of the SOX team and in this role, you will reduce the long-term testing burden of our control environment while ensuring our testing function runs cleanly, efficiently, and on time.
This role is split between overseeing our outsourced management testing operations and building a best-in-class business process Continuous Controls Monitoring (CCM) program — with the balance shifting toward continuous monitoring as the roadmap matures.
The ideal candidate pairs deep SOX/internal audit technical fundamentals with a builder's mindset: comfortable evaluating which controls are ripe for automation, partnering with control owners, AI, and tooling teams to implement monitoring solutions, and leveraging data analytics to increase testing precision, reduce reliance on point-in-time sampling, and optimize program spend.
What You'll Actually Be Doing
Continuous Monitoring Strategy & Implementation (the growth engine of this role)
- Build & Own the Business Process Continuous Controls Monitoring Roadmap: Systematically assess in-scope controls to identify viable candidates for automated or system-based testing. Sequence them into a multi-year plan to measurably reduce overall manual testing effort.
- Design & Implement Solutions: Partner with process owners, engineering, and tooling leads to build continuous monitoring solutions—ranging from exception-based dashboards and automated queries to fully automated control testing.
- Drive Full-Population Assurance: Champion data analytics to shift the program from periodic sample-based testing toward ongoing full-population monitoring, enabling earlier issue detection and control precision.
- Build Business Cases & Track Metrics: Quantify the ROI for continuous monitoring investments (effort saved, risk coverage, testing velocity) and socialize results with leadership. Track continuous monitoring coverage as a standing metric of program health.
- External Audit Reliance Alignment: Partner with external auditors to ensure continuous monitoring outputs, automated scripts, and Information Produced by Entity satisfy audit reliance standards.
Outsourced Testing & Vendor Optimization
- Testing Oversight: Serve as the primary point of contact overseeing our outsourced management testing provider, ensuring testing completes successfully, on time, and to a high quality standard.
- Stakeholder Engagement & Pushback: Push back on and effectively negotiate testing approaches, scope, and timelines with external auditors, outsourced firms, and internal control owners. Proactively remove bottlenecks and resolve stalled controls.
- Vendor Optimization & Budget Management: Own day-to-day vendor management, Statement of Work (SOW) negotiations, and testing budget oversight. Partner collaboratively with vendor leadership to ensure continuous monitoring innovations directly convert into reduced billable testing hours and program cost efficiencies.
External Audit Alignment
Act as key liaison between the outsourced testing firm and our external auditors on Continuous Controls Monitoring reliance, data completeness/accuracy, and automated testing strategy
You're Our Person If...
- 8+ years of progressive experience in SOX compliance, internal audit, or risk & controls, including direct experience managing or interfacing with external audit/testing firms (Big 4 or equivalent) — preferably in a fast-paced tech or SaaS environment
- A proven track record of building or implementing Continuous Controls Monitoring (CCM) — a track record of measurably reducing manual testing effort, not just familiarity with the concept
- Hands-on comfort with data analytics/visualization tools and evaluating which controls are automation-ready
- Demonstrated ability to hold firm and negotiate effectively with senior stakeholders and external partners under deadline pressure, including SOW negotiations and vendor SLAs
- Deep understanding of PCAOB standards and the COSO framework, including how external auditors evaluate Information Produced by Entity (IPE) when relying on automated controls and data analytics
- Demonstrated ability to bridge traditional accounting/finance and technical engineering/IT/data teams
Even Better If...
- Recent Big 4 public accounting experience
- CPA, CIA, CISA, or CDPSE certification
- Bachelor's degree in Accounting, Information Systems, Finance, or Computer Science (or equivalent experience)
- Experience building home-grown continuous monitoring solutions or GRC/audit tooling integrations (dashboards, RPA, analytics pipelines)
- Self-motivated, thrives in a high-growth environment with strong multi-tasking, analytical, and decision-making skills
- Critical thinking self-starter with strong leadership and project management capabilities, including leading projects through a fast-paced life cycle