Sr. Director, SOX IT Controls

Company Description

Who We Are

We thrive on the power and potential of diversity. As a global company, we believe that the most effective way to embrace the diversity of our customers and communities is to mirror it from within.

What We Do

Western Digital has long been at the forefront of game changing innovations. From the invention of the first hard drive to recent advancements in 3D NAND our journey of innovation continues to inspire those who dare to think big.

Our Vision

Wherever you are, Western Digital is with you every step of the way. We are always at the cusp of innovation, pushing the boundaries of technology to make what you thought was once impossible, possible.

Job Description

This position reports to the VP Enterprise Applications, based in San Jose, CA.  It will lead all of IT's SOX controls strategy, planning, and execution:

• Lead defining, implementing and documenting the IT general controls, IT Application controls, Key Reports, interfaces, restricted access and other relevant IT and business process controls
• Manage the risk of execution for IT general controls, including periodic access reviews, change management, SDLC, and relevant controls by performing self-assessments and implementing monitoring mechanisms to ensure system and control owners execute the required activities timely
• Work with IT process owners to identify/improve the documented controls and evidence required for testing key application, security and infrastructure components
• Implement best practices for IT application controls and Key Reports risk management, execution and evidence retention
• Partner with all levels of IT and business management to ensure that SOX testing is conducted in a cooperative, timely and efficient manner with value added reporting and cost-effective recommendations to management to strengthen controls.
• Advise management on best practices as to the SDLC governance, as well as formalize and document the company’s existing processes for risk and controls assessment with defined roles and responsibilities for different stakeholders
• Assist management in coordinating, fulfilling, and managing of the audit requests
• Provide on-going organization wide guidance on IT control requirements and impact.
• Review the adequacy of remediation plans in addressing risk and monitor remediation plan execution through the ‘deficiency closed’ phase in alignment with Internal Controls
• Ensure timely execution, escalation, resolution of issues raise through the company’s cycles of SOX program by partnering with the Internal Controls, Internal and External Auditors

Qualifications

Required and preferred knowledge and job skills:

• Work experience: 15+ years of progressive work experience required. Strong preference for background with a large public accounting firm and some US Public Company Internal Audit experience
• Certification: CISA, CIA, or CPA (or equivalent) professional certification strongly preferred with expectation of base certification shortly upon hire if not already obtained. Preference for additional certifications including CIA, CPA (or equivalent), CISA, CFE, CISSP, or PMP.
• Education: Bachelor’s degree with focus on Accounting, Information Systems, Computer Science, or Finance required. Preference for a Master’s degree.
• Internal Audit Project Execution Skills: Risk assessment, testing, sampling, review, root cause analysis and evaluating of deficiencies, audit reporting, and some consulting skills required.
• Internal Audit Operations Execution Skills: Outstanding project and time management skills required.
• Internal Audit Technical Skills:
  • Strong understanding of SOX theory, materiality, scoping and COSO 2013 framework. Knowledge of SOX best practices and methodology
  • Ability to understand and analyze business process end to end, articulate risks and execute independent judgement
  • Understanding of IT-related controls and IT-dependencies as an integral part of the business processes
  • Recent experience with global public multi-locational audits leading multiple SOX cycles required. Technical skills in data analytics is a plus.
• Internal Audit Soft Skills: Ability to conceptualize and apply judgment across a number of finance, operations, compliance, and cross functional areas, constructively assisting with difficult conversations, excellent presentation skills, ability to assist in influencing and managing expectations of stakeholders, coaching and developing team members, relationship building, and business partnering skills required.
• Language: Excellent verbal and written English language skills required. Secondary written and verbal