Lead SOX Program Strategy & Audit Excellence - ITGC/ITAC
Intuit
- Location
- Multiple Locations
- Level
- Senior
- Salary
- $185.5k – $251k/yr
- H-1B history
- 264 approvals (FY2023)
Skills
About this role
Job Overview
Come join Intuit as a Lead, SOX Program Strategy & Audit Excellence - ITGC/ITAC within the SOX Risk and Compliance Organization (SRCO) . This is a high-impact individual contributor role reporting to the Senior Manager, SOX Strategy, Operations & Audit Excellence. This role serves as the primary SOX liaison to Intuit's Technology organization, driving coverage, quality, and strategic improvement across IT General Controls (ITGCs) and automated/application controls. As a Lead, you will be a trusted partner to cross-functional stakeholders across Finance, Accounting and Tech — bringing deep expertise in IT risk, and automated controls to help the company build a scalable, well-designed, and future-ready control environment.
Responsibilities
Key Responsibilities Serve as the primary SOX liaison to Intuit's Technology organization and hold ultimate accountability for the IT SOX program — building strong partnerships with tech process and control owners and the Tech Compliance organization to drive a scalable, well-designed control environment across ITGCs, access controls, change management, and automated controls. Evaluate the design and operating effectiveness of IT controls — assessing control changes, new system implementations, and business process transformations for SOX impact and providing clear, actionable recommendations to process and control owners. Lead and participate in ITGC and automated/application control walkthroughs with external auditors and co-source teams, ensuring thorough documentation of process flows, risk linkage, and control design rationale. Manage the deficiency evaluation process including root cause analysis, impact assessment, management action plan development, and remediation monitoring and validation through to closure. Perform quality assurance review of co-sourced SOX team workpapers and assist in preparation of SOX materials for senior leadership, the Audit & Risk Committee, and Disclosure Committee — translating complex technology and controls topics into clear, audience-appropriate communications. Ensure SOX protocols, SOPs, and templates related to ITGCs/ITAC controls are regularly reviewed, updated, and operationalized across the SRCO team. Monitor the evolving regulatory environment (PCAOB, SEC) and incorporate relevant changes into program policy and training. Partner with process owners, control owners, and Tech Compliance to drive awareness and understanding of SOX requirements, IT control design standards, and enterprise control strategy. Support and co-develop training and enablement initiatives for technology stakeholders. Proactively lead and influence cross-functionally and at all levels of management. Cultivate strong relationships with leaders in Finance, Accounting, and Technology to facilitate timely, high-quality decision-making in connection with the SOX control environment and related financial and technology risk. Lead with an extreme sense of ownership, critical thinking and a forward-looking mindset to drive operational excellence and continuous improvement across the IT dimensions of Intuit's control environment.
Qualifications
Qualifications 8+ years of relevant work experience in Big 4 public accounting, risk consulting and/or SOX industry experience, with an emphasis on IT and technology risk. Fintech or software industry experience is strongly preferred. Bachelor's or Master's degree in a relevant discipline such as Computer Science, Computer Engineering, or Information Systems, or equivalent experience. CISA, CISSP, AWS Certified Cloud Practitioner or above, CPA, or CIA preferred. CISA, CISSP, AWS Certified Cloud Practitioner, or equivalent certifications. CPA or preferred. Must be able to work out of the San Diego, Mountain View, or Atlanta office at least 3 times a week. Deep expertise in IT General Controls (ITGCs), automated and application controls, and the PCAOB standards and COSO framework governing technology risk in a SOX context.