SOX & Internal Controls Compliance IT Manager, CoStar Group - Arlington, VA

Who is CoStar Group? 

CoStar Group (NASDAQ: CSGP) is a leading global provider of commercial and residential real estate information, analytics, and online marketplaces. Included in the S&P 500 Index and the NASDAQ 100, CoStar Group is on a mission to digitize the world’s real estate, empowering all people to discover properties, insights and connections that improve their businesses and lives. 

We have been living and breathing the world of real estate information and online marketplaces for over 35 years, giving us the perspective to create truly unique and valuable offerings to our customers. We’ve continually refined, transformed, and perfected our approach to our business, creating a language that has become standard in our industry, for our customers, and even our competitors. We continue that effort today and are always working to improve and drive innovation. This is how we deliver for our customers, our employees, and investors. By equipping the brightest minds with the best resources available, we provide an invaluable edge in real estate. 

Role Overview: SOX & Internal Controls Compliance IT Manager 
Arlington, VA | In office, Monday-Friday 

Responsibilities 

• Support Sarbanes-Oxley (“SOX”) compliance, internal controls, and enterprise risk management (“ERM”) assessments.  

• Assist with implementing the SOX compliance programs, including, but not limited to the following activities: 

• Conducting risk assessments and system scoping 

• Conducting walkthroughs and documenting end-to-end technology processes, identifying risks and key controls, using narratives  

• Documenting and assessing the design and effectiveness of key IT general controls (“ITGC”) and IT application controls (“ITAC”)  

• Executing testing to validate the operating effectiveness of controls  

• Evaluating controls deficiencies to determine impact and significance  

• Identifying and implementing effective and efficient plans to remediate control deficiencies  

• Summarizing and documenting results of work performed including management reporting  

• Execute internal controls and IT risk management activities to support our risk management initiatives.  

• Ensure robust IT General Controls over: 

• Logical access management 

• Role-based security and segregation of duties 

• Change management 

• System interfaces and data integrity 

• Configuration controls 

• Oversee periodic user access reviews and segregation of duties analyses. 

• Coordinate with IT and Information Security to align financial systems governance with enterprise cybersecurity standards.  

• Assess technology risks and internal control solutions associated with ERP, SaaS, IT infrastructure and cloud platforms.