About the company
Wise is a global technology company, building the best way to move and manage the world's money. Min fees. Max ease. Full speed.
Responsibilities
- Scope Rationalization & Optimization: Analyze and challenge existing IT SOX scope across applications and infrastructure. Identify duplicate, redundant, or over-engineered ITGCs/ITACs and propose enhancements.
- New System Onboarding: Establish RACMs (Risk and Control Matrices) and identify necessary ITGCs and ITACs for newly in-scope SOX applications and platforms.
- Dependency & System Mapping: Document and maintain end-to-end dependency maps (upstream/downstream data flows, infrastructure ties, and automated interfaces) for management review.
- Controls Testing: Where needed, support control testing (Design & Operating Effectiveness) across our cloud infrastructure and SaaS landscape.
- Stakeholder Management: Partner with key stakeholders across Finance, Risk, Security, Platform to effectively communicate SOX 404 requirements and expectations.
Requirements
- SOX Experience: 3+ years of experience in Technology Risk or IT Audit, with a dedicated focus on SOX. Deep knowledge of SOX 404 requirements, COSO framework, and IT control frameworks (NIST, ISO27001).
- SOX Implementation: Demonstrable experience with first-time SOX audits in cloud-native environments. Understand how compliance frameworks map to dynamic infrastructures.
- Cloud-Native Mindset: Understand how Change Management works in a CI/CD pipeline and how Access Management works in a microservices architecture. Experience with AWS, Terraform, GitHub, Jira, Okta, and SailPoint is preferred.
- Scope & RACM Quality: Know what a good RACM looks like and can look at a system architecture diagram or control framework and spot where coverage is either missing or excessively duplicative.
- Clear Communicator: Can translate technical architecture details into audit-ready documentation while explaining compliance "whys" clearly to engineers.