IT SOX Compliance Manager

San Francisco, CA

Applications have closed

Benchling

Benchling is a cloud-based platform for biotechnology research and development and the only biology-first platform for scientific data, collaboration, and insights.

View company page

Biotechnology is rewriting life as we know it, from the medicines we take, to the crops we grow, the materials we wear, and the household goods that we rely on every day. But moving at the new speed of science requires better technology.

Benchling’s mission is to unlock the power of biotechnology. The world’s most innovative biotech companies use Benchling’s R&D Cloud to power the development of breakthrough products and accelerate time to milestone and market. 

Come help us bring modern software to modern science.

ROLE OVERVIEW

We are looking for a Manager of IT SOX Compliance to join our Internal Audit department, reporting to the Head of Internal Audit. This individual will be a passionate pioneer of and advocate for IT SOX Compliance, eager to join a department strategically leading and partnering to add value across the business and contribute to Benchling’s achievement of its goals. You will fill a newly created role critical to our public company readiness, engaging with senior leaders from various departments within our hyper-growth SaaS company to define, implement and scale robust processes and controls across our IT landscape.

YOUR IMPACT

  • Systems Scoping: Determining which in-house developed, purchased or external IT systems, applications, integrations, and service providers are in-scope for SOX.
  • Control Design: Designing and identifying key controls for those IT systems, applications and integrations determined to be in-scope.
  • Documentation: Supporting and/or creating SOX ready documentation including narratives, flow charts, control descriptions, etc.
  • Testing: Creating and conducting both design and operating effectiveness testing of ITGC and ITAC controls, including in advance of new system implementations and those to ensure application controls and Segregation of Duties (SOD) are configured across the company’s systems.
  • Key Reports/IPE: Determining which reports and IPE are in-scope for SOX; designing and assessing appropriate internal controls over the completeness and accuracy of them.
  • Annual Audit Activities: Leading annual audit activities, in coordination with external audit, such as risk assessment of the IT landscape, agreement on reliance approach, planning and conducting walkthroughs, etc.
  • Deficiencies: Identifying and evaluating known and potential control deficiencies, including assessing severity and determining root cause(s), and appropriate planning for and monitoring of remediation in conjunction with business owner(s) and external audit.
  • Driving Workstreams: Partnering with and overseeing external consultants assisting with SOX readiness activities, bringing expertise and perspective to ensure work planned and performed yields an IT SOX Compliance approach fit for our Company
  • Training, Collaborating and Advocating: Informing and working alongside company leaders such that the importance of internal controls and SOX compliance is broadly understood and striven for.
  • Managing and Presenting: Maintaining and presenting status of annual audit and other key SOX readiness activities, including for and in support of materials for senior leaders and Audit Committee meetings.

ABOUT YOU

  • 7 years of progressive experience in auditing and/or accounting, including 3 years of management experience
  • Command of IT SOX compliance, COSO, COBIT & NIST frameworks
  • CPA, CIA or CISA or equivalent
  • Experience working in or with high-growth SaaS environment. Experience in public accounting and/or with public company preferred.
  • Familiarity with NetSuite, Salesforce preferred
  • Excellent organization skills and experience managing projects with a wide range of partners. Must be able to prioritize tasks to meet deadlines and demands in a fast-paced environment
  • Analytical and motivated to self-educate; able to identify and report relevant issues to management for timely and accurate resolution
  • Ability to communicate effectively, verbally and in writing, with teammates and various levels of management as well as external contacts

Benchling welcomes everyone. 

We believe diversity enriches our team so we hire people with a wide range of identities, backgrounds, and experiences. Even if you don't meet 100% of the qualifications for this job, we strongly encourage you to apply.

We are an equal opportunity employer. That means we don’t discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We also consider for employment qualified applicants with arrest and conviction records, consistent with applicable federal, state and local law, including but not limited to the San Francisco Fair Chance Ordinance.

Our leadership principles guide how all Benchlings can lead by example:

  • Admit mistakes and shortcomings
  • Deliver results
  • Disagree and commit
  • Obsess over customers
  • Rely on work ethic
  • Show empathy
  • Recruit and develop the best
  • Sweat the details
  • Think and communicate clearly
  • Unite around the mission

For applicants for U.S.-based roles only: All new hires in the United States are required to be fully vaccinated against COVID-19 and to provide proof of vaccination prior to their first day of employment. If you are unable to be vaccinated for medical or religious reasons, we will explore potential reasonable accommodations; however, Benchling may not be able to grant such accommodations in all cases if doing so would cause undue hardship.

If you are a Colorado, Connecticut, or New York City resident: Please contact us by emailing salary-inquiries@benchling.com to receive compensation and benefits information for this role. Please include the job title in the subject line of the email.

Tags: Audits CIA CISA Cloud COBIT Compliance Monitoring NIST NIST Frameworks R&D Risk assessment SaaS

Perks/benefits: Career development Startup environment

Region: North America
Country: United States
Job stats:  5  0  0

More jobs like this

Explore more InfoSec / Cybersecurity career opportunities

Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.