Manager, Internal Audit

Role Overview

SOX 404 Compliance and Control Testing

• Plan and execute assigned SOX 404 compliance activities in line with internal methodology and external-auditor expectations.
• Maintain Risk and Control Matrices for relevant business processes and IT applications.
• Conduct walkthroughs, assess annual scope, and evaluate key-control coverage.
• Evaluate controls across procure-to-pay, order-to-cash, financial close, HR and payroll, treasury, inventory, and other processes.
• Identify and test automated and semi-automated IT application controls, configurations, workflows, and system interfaces.
• Test the completeness and accuracy of reports, queries, spreadsheets, and other information used in controls.
• Prepare reproducible workpapers documenting procedures, evidence, samples, conclusions, and follow-up.
• Evaluate deficiencies, perform root-cause analysis, coordinate remediation, monitor milestones, and retest remediation.
• Coordinate external-auditor walkthroughs and evidence requests.
• Train control owners on objectives, evidence, documentation, and SOX program changes.