Manager, IT SOX Compliance & Risk

Genesys empowers organizations of all sizes to improve loyalty and business outcomes by creating the best experiences for their customers and employees. Through Genesys Cloud, the AI-powered Experience Orchestration platform, organizations can accelerate growth by delivering empathetic, personalized experiences at scale to drive customer loyalty, workforce engagement, efficiency and operational improvements.

We employ more than 6,000 people across the globe who embrace empathy and cultivate collaboration to succeed. And, while we offer great benefits and perks like larger tech companies, our employees have the independence to make a larger impact on the company and take ownership of their work. Join the team and create the future of customer experience together.

Summary

As an IT SOX Compliance & Risk Manager at Genesys, you will play a key role in supporting the organization's IT Sarbanes-Oxley (SOX) compliance program by helping maintain effective IT General Controls (ITGCs), automated controls, and IT-dependent manual controls across critical business systems. You will partner closely with Technology, Security, Finance, Internal Audit, and external auditors to support compliance activities, assess technology risks, review third-party controls, and strengthen the overall control environment.

This role requires strong knowledge of SOX compliance, IT governance, cloud technologies, cybersecurity controls, third-party risk management, and risk management practices, along with the ability to collaborate effectively across cross-functional teams to drive compliance, operational excellence, and continuous improvement.

Key Responsibilities

• Manage IT SOX compliance activities and execution of the SOX program to support compliance with SOX Section 404 requirements and organizational objectives.
• Lead annual SOX scoping, risk assessments, control design evaluations, testing activities, and remediation efforts while partnering with business and technology stakeholders to strengthen the overall control environment across IT General Controls (ITGCs), automated controls, and IT-dependent manual controls.
• Oversee logical access governance activities, including user provisioning and deprovisioning, access reviews, privileged access management, segregation of duties, and identity governance processes.
• Assess risks and controls related to software development lifecycle (SDLC), change management, DevOps processes, source code repositories, and cloud deployment activities.
• Lead third-party compliance and technology risk assessments through the review of SOC reports, evaluation of vendor controls, identification of control gaps, and coordination of remediation activities.
• Lead cross-functional coordination with Internal Audit, External Audit, Security, Engineering, Finance, and business process owners to drive compliance objectives, audit readiness, and remediation outcomes.
• Provide guidance on IT governance, risk, and control frameworks (COSO, COBIT, NIST), conduct technology risk assessments, and monitor emerging cybersecurity and regulatory risks to strengthen the compliance program.
• Evaluate the impact of system implementations, cloud migrations, organizational changes, and technology initiatives on the SOX control environment and associated technology risks.
• Develop and maintain compliance documentation, risk assessments, remediation plans, metrics, and management reporting to support audit readiness and stakeholder communication.
• Leverage data analytics, automation, and continuous monitoring techniques to improve control effectiveness, testing efficiency, audit readiness, and compliance reporting.
• Lead compliance program planning activities, including annual testing strategies, compliance testing schedules, resource allocation, project prioritization, and execution oversight for SOX compliance and technology risk initiatives.
• Evaluate compliance and technology risk issues, determine risk severity and business impact, establish remediation priorities, provide risk-based recommendations to management, and escalate significant control deficiencies and risks to leadership as appropriate.
• Monitor remediation activities, track progress against established milestones, and drive timely resolution of control deficiencies through collaboration with control owners and technology stakeholders.
• Provide day-to-day leadership, coaching, and work prioritization for compliance analysts, contractors, or cross-functional compliance resources supporting SOX and technology risk initiatives.
• Develop and present compliance metrics, program status updates, risk trends, audit results, and remediation progress reports to senior leadership and key stakeholders.
• Provide compliance guidance, training, and awareness programs to technology teams,