IT SOX Compliance Expert

ID: IT SOX Compliance Expert

Full time

Bucharest

Senior

28-08-2025

Your day to day: We are seeking a highly skilled IT SOX Compliance Expert to support and ensure success in our SOX compliance activities. In this role, you will manage compliance within internal and external audits, pro-actively support and lead on SOX transformation for new technologies, and ensure no deficiencies in SOX GITC, compliance, security, and privacy controls under the guidance of a SOX lead.

Responsibilities

With these activities you will have a great impact on our business:

You will be in charge of quality Checks: Perform quality checks on control activities and prepare the evidence for internal and external audits, managing compliance, and audit controls to reduce risk.
Compliance Transformation: Pro-actively support and lead SOX ramp-up and onboarding SOX scoped systems in AI, SAP HANA, Machine Learning, Robotics, Cloud, Blockchain, etc. under necessary control measures.
Deficiency Prevention: Ensure no deficiencies or non-conformities against SOX GITC, security controls, and privacy controls
Process Improvement: Challenge and improve existing security, privacy, compliance, and SOX processes to reduce overheads and strengthen optimisation.
Audit Management: Manage audit actions and follow-up to ensure completion and resolve non-conformities.
SOX SteerCo Preparation: Prepare SOX SteerCo materials and follow up on actions.
Compliance Calls: Coordinate and manage SOX compliance calls and sessions.
Deficiency Prevention: Ensure no deficiencies in SOX GITC, security, and privacy controls.
Compliance Coordination: Manage compliance in audits, ensuring risk reduction. Own improvements actions and remediation.
Reporting and Issue Resolution: Prepare reports, resolve issues promptly, and integrate lessons learned.
Documentation: Create, maintain, review and update SOX processes, procedures, SOPs and guidelines in line with business requirements.

Requirements

With these skills you are a great candidate:

•SOX Practical knowledge of SOX legislation (S404), including their application in IT departments and third-party management.

•IT Audit and Certifications: Candidates with experience in IT audit and trained in areas of ISO27001, CSOXI, S404, CISM, CISA, CRISC will be preferred. Certifications will be a plus

•Communication Skills: Strong verbal, written, and presentation skills.

•Technical Knowledge: Understanding of Remedy system, EVO architecture, SAP HANA, AI, Machine Learning, Cloud, and ITIL.

•Process Management: Experience in process mapping, design, project planning, and workflow management.

•Analytical Skills: Strong problem-solving abilities, especially in audit situations.

•Attention to Detail: Ensuring accuracy and completeness in compliance activities.

•Technical Knowledge: Good understanding of IT and data centre process standards (ITIL), IT-Service Management (ISO 20000), ISO27001, SAP, and data centre environments.

•Certifications: Candidates with experience in IT audit and trained in areas of ISO27001, CSOXI, S404, CISM, CISA, CRISC will be preferred. Certifications will be a plus