Director, SOX IT Controls

Who We Are

At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward – always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.

The Role

The Director, SOX IT Controls, will direct a comprehensive SOX IT compliance program ensuring full compliance with all management defined controls.  This role will work across the Chief Information Office to achieve program excellence for all financially significant systems.  Additionally, the role will partner with the Kyndryl business organizations and the General Audit Organization.  This line 2 organization will be responsible for control performance across a variety of applications and platforms in different IT delivery modalities (IaaS and SaaS.)  The leader will be expected to oversee compliance and testing for all in scope CIO applications.  Ideal candidates will have experience as a SOX auditor or large company (>$10B annual revenue) compliance leader.  Experience with Big 4 accounting firms and the SAP applications (S/4HANA including associated applications, Ariba, Fieldglass) will be considered a plus. 

Essential Responsibilities:

• Lead and manage a team of IT compliance professionals delivering a comprehensive SOX IT compliance capability.

• Develop and implement a comprehensive SOX IT controls and IT dependencies (ITACs, Interfaces, Key Reports) compliance program.  This includes integration with policy and control and execution process development

• Build effective relationships vertically within assigned area of operations along with horizontally cross CISO/CIO supporting organizations

• Conduct regular reviews and assessments of line 1 activities to evaluate the effectiveness of existing controls and identify areas for improvement.

• Prepare and present reporting for senior leadership on the status of ICOFR IT controls.

• Guide and monitor ineffective control remediations.

• Provide expertise and advice to support application owners in implementing the SOX IT controls.

• Manage the designation and retirement of financially significant (FINSIG) applications.

• Serve as primary point of contact for internal and external SOX audits.

• Stay up-to-date with industry best practices and any regulatory changes.

Kyndryl currently does not require employees to be fully vaccinated against COVID-19, however, if you are hired to work at a client, customer, or partner location, you may be required to show proof of vaccination to align with their respective COVID-19 vaccination policies.  Those who believe they are eligible may apply for a medical or religious accommodation prior to the start of employment.

Who You Are

Required Experience & Skills:

• 18+ years experience in public accounting or large company IT audit, IT risk consulting and/or leading SOX program support/execution, Big 4 preferred.

• Bachelor’s degree in business/finance/accounting or related field.

• Demonstrated leadership of IT audit program as auditor or lead program manager.  Ability to exhibit successful execution of the essential responsibilities for the role.

• Dedication to continuous learning through a combination of self-directed, certification, military, and formal education sources.

• Expert level knowledge in SOX IT controls and compliance oversight requirements.

• Applicable experience at a large public accounting firm with experience or similar large firm conducting or supporting SOX IT audits.

• Thorough understanding of testing approaches for GITCs, ITACs, Interfaces and related supporting controls. Ability to select, execute, advise, and defend selected techniques with internal and external auditors.

• Expert knowledge of SAP system deployments – both on prem and SaaS based – including strategies for implementing controls across the key SOX domains.

• Knowledge of available compliance and transaction reports to be used for compliance testing and validation support.

• Skills to identify elements of risk across schedule, cost a