SOX Compliance Lead

Job Summary

HP isseekinga highly motivatedand experiencedSOX Compliance Leadto join our Security, Risk Management, & Compliance departmentwhich supports engineeringin building customer trust, strengthening platform and product security, and enabling effective risk managementand compliance.

This roleis ahighly visiblerolemanaging and executingthe compliance and internal control testing processes related to SOX. This role partners withEngineering,IT, Finance,InternalAudit, andthe ExternalAuditors to assess and ensure that internal controls over financial reporting (ICFR) are designed andoperatingeffectively.

This role will also be essential in organizational efforts to further integrate Agentic AI within the SDLCto reduce compliance burdenwhile still ensuring adherence to SOX and other security and privacy regulatory requirements and certifications.

Responsibilities

Manage and execute the SOX compliance program, including scoping, risk assessment, testing, and remediation activities.

Identifyand evaluate ITGCs across areas such as access controls, change management, system operations, andSDLC.

Collaborate with control owners to ensure understanding, proper documentation, and implementation of IT control procedures.

Perform walkthroughs and testing of controls for key financial systems and supporting infrastructure.

Track, document, and communicate control deficiencies and remediation plans.

Serve as a liaison betweenEngineering,IT, internal audit,andexternal auditors during SOX reviews.

Assistwith the development and maintenance of SOX documentation including risk/control matrices, process narratives, and flowcharts.

Monitor and report on compliance status and risks to leadership through dashboards and reports.

Provide guidance on control design and process improvements to enhance the overall IT control environment.

Supportother securityand privacycompliance requirements such as ISO / SOC2, NIS2, DORA,EO 14117,EU CRA,EU AI Act,GDPR,etc

Support Shift-Left and Agentic AI efforts toimprove the SDLC bymoving testing and security earlier in the lifecycle and automating processesto reduce manualdevelopmentand complianceefforts

Qualifications

Strong understanding of internal control over financial reporting (ICOFR), risk assessment, IT General Controls (ITGC), and PCAOB expectations

Demonstrated experience testingITGCs forapplications, operating systems, and databasesand reviewing/validatingthe completeness and accuracy of audit evidence

Experienceinconstructivelychallenging internal and external auditorswhenappropriate, ensuring audit requests and findings are risk based, practical, and aligned with regulatoryguidanceAttentionto detail and quality, balanced with the ability to see the big picture andidentifyareas for process simplification

Ability to proactively look ahead,anticipatequestions, independently assess risk, think critically and creatively to achieve the best outcome, and elevate issues to the right level internally and externally to resolve

Proven ability to work in a deadline-driven environment and handle multiple projects simultaneously

Excellent interpersonal,writtenand verbal communications, presentation and influencing skills

Strong planning and project management skills

Education& Experience

8+ years of experience in IT Audit, IT Compliance, or a related discipline, with direct SOX IT compliance experience

Bachelor’s degree in Business Administration, Accounting, Management Information Systems (MIS), ComputerScienceor related field

Preferred certifications: CISA, CISM, CRISC, CISSPor similar certifications

RequiredKnowledge & Skills

BusinessProcesses

ICOFR

IT General Controls

IT Audit

System and Organization Controls (SOC) reports

Preferred Knowledge & Skills

AuditingGithubor similar source coderepositories

Automating complianceefforts to reduce manual burden

Cybersecurity Governance, Risk & Compliance

Control frameworks such as NIST CSF,NIST AI RMF,ISO27001, SOC2,etc

Familiarity withAIrisk management

Impact & Scope
• Impacts function and leads and/or provides expertise to functional project teams and may participate in cross-functional initiatives.

Complexity
• Works on complex problems where analysis of situations or data requires an in-depth evaluation of multiple factors.

Disclaimer
• This job description describes the general nature and level of work performed in this role. It is not intended to be an exhaustive list of all duties, skills, responsibilities, knowledge, etc. These may be subject to change and additional functions may be assigned as needed by management.

Salary:

The pay range for this role is$105,050to$161,800USD annually with additional opportunities for pay in the form of bonus and/or equity (applies to United States of America candidates only). Pay varies by work location, job-related knowledge, skills, and experience.

Benefits:

HP offers a comprehensive benefits package for this position, including:

• Health insurance
• Dental insurance
• Vision insurance
• Long term/short term disability insurance
• Employee assistance program
• Flexible spending account
• Life insurance
• Generous time off policies, including;
• 4-12 weeks fully paid parental leave based on tenure
• 11 paid holidays
• Additional flexible paid vacation and sick leave (US benefits overview)

The compensation and benefits information is accurate as of the date of this posting. The Company reserves the right to modify this information at any time, with or without notice, subject to applicable law.

Job -

Data & Information Technology

Schedule -

Full time

Shift -

No shift premium (United States of America)

Travel -

Relocation -

Equal Opportunity Employer (EEO) -

HP, Inc. provides equal employment opportunity to all employees and prospective employees, without regard to race, color, religion, sex, national origin, ancestry, citizenship, sexual orientation, age, disability, or status as a protected veteran, marital status, familial status, physical or mental disability, medical condition, pregnancy, genetic predisposition or carrier status, uniformed service status, political affiliation or any other characteristic protected by applicable national, federal, state, and local law(s).

Please be assured that you will not be subject to any adverse treatment if you choose to disclose the information requested. This information is provided voluntarily. The information obtained will be kept in strict confidence.

For more information, review HP’sEEO Policy or read about your rights as an applicant under the law here: “Know Your Rights: Workplace Discrimination is Illegal"