Manager - Sox Advisory Team

Capital One Capital One · Banking · Richmond, VA +1

This role is a Manager for a SOX Advisory Team, focusing on SOX principles, risk management, and controls processes within a global payment network business. Responsibilities include leading SOC1 engagements, guiding stakeholders through risk management frameworks, designing project plans, managing scope/schedule/budget, developing audit programs, interpreting risks, and advising on SOX testing. The role requires experience in SOX, audit, or IT risk management, with preferred qualifications including a Master's degree and relevant certifications like CPA or CIA.

What you'd actually do

  1. Lead the execution of SOC1 engagements performed by our external auditors for our global payment network business.
  2. Assist in guiding multiple customer stakeholders through our robust risk management framework including planning, scoping, risk assessment, control design, testing, deficiency analysis, reporting and certification.
  3. Design, develop, and manage project plans and delivery roadmaps in a complex dynamic environment.
  4. Effectively manage scope, schedule, resources and budget and communicate status, impediments, and risks/issues.
  5. Develop engagement planning documentation for assigned areas to communicate rationale for scoping decisions, and develop audit programs to ensure adequate coverage of risks.

Skills

Required

  • SOX
  • audit
  • information technology risk management
  • financial reporting risk management
  • project management
  • risk assessment
  • control design
  • testing
  • reporting
  • communication

Nice to have

  • Master's Degree in Business Administration, Accounting, or Finance
  • Certified Public Accountant (CPA)
  • Certified Internal Auditor (CIA)
  • Certified Information Systems Auditor (CISA)
  • experience in Auditing or Control Evaluation
  • experience in SOX controls

What the JD emphasized

  • SOX principles
  • risk management
  • controls process
  • external auditors
  • ICFR framework