Principal Security & Compliance Analyst

Autodesk is seeking an experienced Compliance Analyst to lead key aspects of its Sarbanes-Oxley (SOX) IT General Controls (ITGC) program. This individual contributor role combines deep technical expertise, independent judgment, and business understanding to strengthen the effectiveness, scalability, and sustainability of the IT control environment supporting financial reporting.  A successful candidate will take end-to-end ownership of significant ITGC workstreams and initiatives, including onboarding new systems into SOX scope, evaluating controls for systems within SOX scope and improving evidence collection and testing through automation. They will interpret complex technical and regulatory requirements, evaluate business and compliance risks, and recommend practical solutions with minimal supervision.  Working closely with control owners, Engineering, IT, Security, Audit & Advisory Services, and external auditors, this individual will influence technical and control decisions, drive cross-functional outcomes, and help shape the ongoing improvement of Autodesk’s SOX ITGC program. The ability to assess IT controls in financial reporting environments and communicate effectively with technical stakeholders and management is essential.

Lead key aspects of the SOX ITGC program, with end-to-end accountability for assigned control domains, management testing, audit readiness, and continuous improvement initiatives.  Independently assess the design and operating effectiveness of IT controls supporting financial reporting across on-premises and cloud environments.  Serve as a subject matter expert on SOX ITGC requirements, evaluating complex control issues, assessing technical and business risks, and recommending risk-based improvements to strengthen SOX compliance.  Assess control deficiencies and their business impact, recommend risk-based remediation priorities, and partner with control owners to drive timely and sustainable resolution.  Partner with Engineering, IT, Security, and Audit & Advisory Services to onboard new systems into SOX scope, translating compliance requirements into effective and scalable controls and operational practices.  Identify and lead automation and standardization initiatives to reduce redundant activities and improve the efficiency, consistency, and quality of SOX control execution, evidence collection, monitoring, testing, and documentation.  Lead assigned internal and external audit activities, coordinating evidence requests and testing discussions, providing technical guidance, and resolving complex audit inquiries.  Independently lead complex cross-functional initiatives from requirements definition and planning through execution, stakeholder adoption, and delivery of measurable outcomes.  Promote best practices through technical guidance, knowledge sharing, training, and mentorship of less experienced colleagues and control owners.  Minimum Qualifications  •  4–5 years of experience in SOX 404 ITGC auditing, IT assurance, security compliance, information security, or a related discipline, including substantial hands-on technical work.  •  Strong understanding of SOX 404, IT general controls, financial systems audit requirements, and control design in on-premises and cloud environments.  •  Demonstrated ability to independently evaluate complex control issues, exercise sound judgment, and drive significant initiatives or workstreams with limited oversight.  •  Experience assessing security controls, explaining requirements to technical control owners, and influencing decisions across cross-functional stakeholder groups.  •  Experience with evidence collection or testing automation and evaluating the sufficiency of evidence for access management, change management, segregation