SOX Compliance Lead

Job Description

SOX Compliance Lead | Hewlett Packard Enterprise

The Tone:
This is a full-time role at Hewlett Packard Enterprise, located in the United States. Hewlett Packard Enterprise builds a product and service portfolio of personal systems, printers, and 3D printing solutions, aiming to inspire meaningful progress and make the world a better place through technology. The company’s Technology & Innovation Organization is at the forefront of redefining how value is delivered, driving a shift towards enabling intelligence at the edge. This role is crucial for managing and executing SOX compliance and internal control testing processes, ensuring internal controls over financial reporting are effective and compliant.

The TL;DR
• Role: Full Time
• Type: Full time
• Location: United States
• Pay: $105050–$161800 yearly
• Team: Security, Risk Management, & Compliance department, supporting engineering
• Mission: This person owns managing and executing the compliance and internal control testing processes related to SOX, ensuring internal controls over financial reporting are designed and operating effectively.
• Tech Stack: Github or similar source code repositories

What You’ll Actually Do
• Manage: Oversee the SOX compliance program, including scoping, risk assessment, testing, and remediation activities.
• Evaluate: Identify and assess IT General Controls (ITGCs) across areas like access controls, change management, system operations, and the SDLC.
• Collaborate: Partner with control owners to ensure understanding, proper documentation, and implementation of IT control procedures.
• Liaise: Serve as the primary contact between Engineering, IT, internal audit, and external auditors during SOX reviews.
• Innovate: Support efforts to integrate Agentic AI within the SDLC to reduce compliance burden and automate processes.

The Must-Haves
• Background: Bachelor’s degree in Business Administration, Accounting, Management Information Systems (MIS), Computer Science, or a related field, with a focus on IT Audit or Compliance.
• Experience: 8+ years of experience in IT Audit, IT Compliance, or a related discipline, with direct SOX IT compliance experience. This includes demonstrated experience testing ITGCs for applications, operating systems, and databases, as well as reviewing and validating audit evidence. Experience challenging auditors when appropriate is also required.
• Skills: Strong understanding of internal control over financial reporting (ICOFR), risk assessment, IT General Controls (ITGC), and PCAOB expectations. Excellent interpersonal, written and verbal communication, presentation, and influencing skills. Strong planning and project management skills. Ability to proactively anticipate questions, independently assess risk, think critically to achieve outcomes, and elevate issues for resolution.
• Bonus: Preferred certifications include CISA, CISM, CRISC, CISSP, or similar. Familiarity with auditing Github or similar source code repositories, automating compliance efforts, Cybersecurity Governance, Risk & Compliance, and control frameworks like NIST CSF, NIST AI RMF, ISO 27001, SOC2, NIS2, DORA, EU CRA, EU AI Act, GDPR, and AI risk management is a plus.