Sr. Manager, SOX Risk and Compliance (REMOTE EST, CST Time Zones)

Be part of an amazing story.

Macy’s is more than just a store. We’re a story. One that’s captured the hearts and minds of America for more than 160 years. A story about innovations and traditions…about inspiring stores and irresistible products…about the excitement of the Macy’s 4th of July Fireworks, and the wonder of the Thanksgiving Day Parade. We’ve been part of memorable moments and milestones for countless customers and colleagues. Those stories are part of what makes this such a special place to work.

Job Overview

The Senior Manager, SOX Risk & Compliance oversees and executes the Company’s internal controls within the Sarbanes-Oxley (SOX) compliance program. Reporting to the Director, GRC, the Senior Manager leads and facilitates control activities for entity and process-level controls to ensure compliance with SOX Section 404 and alignment with the COSO internal control framework. The role serves as a key cross-functional partner, collaborating with business process owners, Internal Audit, and external auditors to assess risk, evaluate control effectiveness, and remediate deficiencies. The Senior Manager, SOX Risk & Compliance also drives continuous improvement of the control environment and promotes strong governance practices across the organization.

What You Will Do

• Plan, oversee, and manage the testing and monitoring of entity- and process-level controls under the SOX 404 program. Ensure control scope is appropriate and financial reporting risks are effectively mitigated.
• Act as liaison between Finance and Audit teams on all SOX matters. Partner with control owners to perform risk assessments, define SOX scope, and align testing schedules and requirements.
• Ensure timely and accurate execution of control activities (e.g., certifications, SOC evaluations, SOD analyses). Maintain comprehensive SOX documentation in Workiva, including RACMs, flowcharts, system diagrams, and control procedures.
• Coordinate with Internal Audit and external auditors on walkthroughs, testing, and data requests. Support management testing and ensure auditors can rely on the company’s evaluation of controls where appropriate.
• Monitor test results and self-assessments to identify design or operating deficiencies. Lead remediation efforts, including root cause analysis, corrective action planning, and verification of remediation effectiveness.
• Provide expertise on designing and enhancing controls for new or changing processes. Partner with IT on related control requirements and train control owners on COSO principles, IPE, and best practices.
• Identify opportunities to strengthen and streamline the control environment, including automation and improved monitoring. Promote compliance and governance by developing guidelines, training sessions, and monitoring emerging risks.
• Develop and deliver reporting on control program status, testing progress, issues, and remediation to leadership, the Director, and committees (e.g., Audit Committee), ensuring transparency and timely escalation.
• Foster an environment of acceptance and respect that strengthens relationships, and ensures authentic connections with colleagues, customers, and communities. 
• In addition to the essential duties mentioned above, other duties may be assigned.

Skills You Will Need

Technical Expertise: Deep knowledge of COSO Internal Control Framework, SOX Section 404, and risk management principles.
Regulatory Knowledge: Strong understanding of financial reporting risks, entity-level and process-level controls, and compliance requirements.
GRC Systems Proficiency: Skilled in using GRC software platforms (e.g., Workiva) to document, monitor, and test controls.
Audit Partnership: Experienced in coordinating with Big Four audit firms, including walkthroughs, testing, and control assessments.
Analytical Skills: Proven ability to assess risks, evaluate control effectiveness, and identify control deficiencies.
Problem-Solving: Strong root cause analysis skills and ability to develop practical remediation plans.
Process Improvement: Ability to identify opportunities for automation, control optimization, and efficiency.
Leadership & Influence: Strong executive presence with ability to influence and guide leaders in a matrixed environment.
Ethical Standar