IT SOX Compliance Director

Director IT SOX Compliance at ibex, Mandaluyong, National Capital Region, Philippines. The role provides strategic leadership and oversight of IT controls and compliance under the Sarbanes-Oxley Act (SOX). This role drives the assessment, design, implementation, and continuous monitoring of IT General Controls (ITGCs), conducts SOX 404 testing, and ensures adherence to regulatory requirements. The ideal candidate will bring exceptional leadership capabilities, advanced technical proficiency, and deep expertise in IT SOX compliance, and will partner closely with IT, Finance, Internal Audit, and External Audit teams.

• Develop, execute, and oversee the annual SOX IT compliance plan, including scoping, testing, remediation, and reporting.
• Ensure coverage includes technology infrastructure and key business applications impacting financial reporting (revenue systems, payroll systems, Active Directory, in-scope reporting tools).
• Provide expert guidance on the identification, evaluation, and mitigation of IT risks related to financial reporting.
• Drive the maturity of the IT SOX program through continuous process improvement, automation, and adoption of industry best practices (e.g., COBIT, COSO).
• Maintain proactive ownership of ITGCs for all in-scope systems.
• Develop a working knowledge of all in-scope systems and their impact on financial reporting.
• Collaborate with process and system owners to evaluate, strengthen, and optimize control structures.
• Oversee testing, remediation, and documentation of control effectiveness.
• Identify opportunities for process improvements and risk mitigation.
• Manage SOX scoping for vendor-managed in-scope applications.
• Review SOC 1 reports, assess deficiencies, and ensure appropriate complementary user entity controls (CUECs) are in place.
• Ensure vendors meet company compliance and reporting standards.
• Act as the primary IT liaison for internal and external auditors.
• Facilitate communications between IT, Finance, and business functions to ensure audit readiness.
• Drive timelines for audit activities and ensure completeness and accuracy of provided documentation.
• Monitor business and IT system changes to assess potential impacts on ITGCs.
• Proactively address risks from new technologies, system upgrades, or process changes.
• Ensure SOX-related IT procedures are properly documented to minimize rework and reduce audit findings.
• Partner with IT teams to create process flowcharts, policies, and control documentation where gaps exist.
• Provide regular, high-level reports on the IT SOX compliance status and risk posture to executive leadership.

• Bachelor's degree in Computer Science, Accounting, Finance, or a related field with expertise in SOX and ITGS compliance.
• 12 to 15+ years of experience in IT SOX compliance, IT audits, or IT risk management.
• Strong knowledge of SOX 404, IT General Controls (ITGCs), COBIT, NIST, COSO, and ISO 27001.
• Experience with SAP, Oracle, Workday, and cloud security (AWS, Azure, GCP) controls.
• Expertise in automated SOX testing tools and GRC platforms (e.g., ServiceNow GRC, AuditBoard).
• Prior experience working with public companies or Big 4 audit firms (Deloitte, PwC, EY, KPMG) is a plus.
• Strong understanding of IT risk, compliance, and cybersecurity.
• Strong analytical and problem-solving skills with attention to detail.
• Expertise in IT change management, access controls, operations management, and data security.
• Excellent project management and leadership skills.
• Demonstrated ability to lead, influence, and collaborate effectively with cross-functional teams, including senior management, auditors, and business leaders.

IBEX is proud to be an equal employment opportunity employer. Business activities including, but not limited to, hiring, promotion, and compensation are conducted in compliance with all applicable laws and without regard to race, color, ethnicity or national origin, gender, age, marital status, religion, political or union affiliation, sexual orientation, gender identity, disability status, pregnancy, genetics, veteran status, or any other basis protected by law.

• Seniority level: Director
• Employment type: Full-time
• Job function: Information Technology
• Industries: Outsourcing/Offshoring