IT Compliance Specialist; SOX

Position Summary

We are seeking a detail-oriented and analytical IT / Security Compliance Specialist to support and strengthen our SOX IT control environment. This role will be on-site in Buda, TX, and will be primarily responsible for the design, execution, documentation, and continuous improvement of IT General Controls (ITGCs), with a strong focus on SOX compliance.

In addition, this individual will play a key role in evaluating Segregation of Duties (SoD) risks within business systems as part of the user access provisioning and change management processes. The ideal candidate combines technical understanding of IT systems with strong knowledge of internal controls and audit requirements.

This role partners closely with IT, Accounting, Operations, and business stakeholders to ensure a strong and sustainable control environment.

Key Responsibilities

SOX IT Controls (Primary Focus)

Support the execution and maintenance of SOX IT General Controls (ITGCs), including:

o User access management (provisioning, modifications, terminations, periodic access reviews)

o Privileged access controls

o Change management controls

o IT operations controls (backups, job monitoring, incident management)

Perform control testing, evidence collection, and documentation in support of internal and external audits.

Identify control gaps and work with control owners to design and implement remediation plans.

Assist in annual SOX scoping and risk assessment activities.

Maintain clear and audit-ready documentation of control procedures, narratives, and risk/control matrices.

Partner with external auditors to facilitate walkthroughs and testing requests.

Segregation of Duties (SoD) & Access Governance

Evaluate Segregation of Duties risks as part of user access requests and role design.

Review and assess access requests for conflicts within ERP and other key financial/business systems.

Recommend mitigating controls where SoD conflicts cannot be avoided.

Assist in maintaining and refining SoD matrices and access governance frameworks.

Support periodic user access reviews and certification processes.

Process Improvement & Governance

Drive continuous improvement of control processes to increase efficiency and automation.

Assist in the implementation or optimization of GRC tools and access governance platforms.

Provide training and guidance to control owners and system administrators.

Qualifications

Required

Bachelor's degree in Information Systems, Accounting, Cybersecurity, or related field.

Ability to commute to and work out of the corporate office in Buda, TX.

2-5+ years of experience in IT audit, IT compliance, SOX, or IT risk management.

Strong understanding of:

o SOX ITGC requirements

o User access management controls

o Change management controls

o Segregation of Duties concepts

Experience working with ERP systems (e.g., SAP, Oracle, Vista Viewpoint, etc.).

Experience supporting external audit requests.

Strong documentation and organizational skills.

Ability to communicate effectively with both technical and non-technical stakeholders.

Preferred

Professional certifications such as CISA, CIA, or CISSP (or in progress).

Experience in a public company SOX environment.

Familiarity with automated control monitoring and access governance solutions.

Experience with Service Management platforms (e.g., Jira, Service Now).

Key Competencies

Strong analytical and problem-solving skills

High attention to detail and accuracy

Ability to manage multiple priorities in a deadline-driven environment

Strong interpersonal and cross-functional collaboration skills

Sound judgment in evaluating risk and control effectiveness

-7798