SOX Information Technology Manager, CoreWeave

• 6+ years of hands-on IT audit and SOX compliance experience, preferably in both Big 4 and in-house internal audit/SOX roles
• Experience helping establish or scale SOX IT compliance programs at newly public or pre-IPO companies
• Experience with NetSuite, Salesforce, Workday and Coupa
• Deep understanding of ITGCs, application controls, and risk assessments
• Hands-on, strategic, and execution-focused; thrives in fast-paced and evolving environments
• Strong project management, analytical, and communication skills
• Bachelor’s degree in Information Systems, Computer Science, Accounting, or a related field
• CISA or similar certification is a plus
• Wondering if you’re a good fit? We believe in investing in our people, and value candidates who can bring their own diversified experiences to our teams – even if you aren't a 100% skill or experience match.

Desirable

• The SOX IT Manager will be responsible for managing and executing the IT SOX compliance program, focusing on ITGCs (IT General Controls), IT application controls, and system/process assessments
• They will identify risks, coordinate robust control implementations, drive process automation, and collaborate with engineering, security, DevOps, and finance to comply with SOX Section 404
• The role reports directly to the SOX Senior Manager -IT
• Manage and execute the end-to-end IT SOX program including scoping, risk assessment, controls testing, remediation, and reporting
• Partner closely with IT teams to design and implement effective and scalable IT controls
• Manage walkthroughs, coordinate evidence collection, track remediation efforts, and ensure timely closure of audit gaps
• Establish and maintain SOX documentation, including risk/control matrices, and testing procedures
• Monitor and report on the status of IT control effectiveness and remediation progress to internal stakeholders
• Provide guidance and training to control owners to promote awareness and understanding of SOX compliance requirements
• Advise IT teams on SOX requirements related to access, change management, job management, third-party service organization and system development life cycle (SDLC) controls
• Deliver SOX IT training and enablement tailored for control owners
• Perform Key reports testing
• Provide guidance to ensure effective design and execution of SDLC controls during system implementations