IT SOX - Regulatory Compliance Senior Specialist

The Oracle Cloud Infrastructure Compliance organization is responsible for ensuring the compliance of Oracle’s internal financial systems through the continuous monitoring of IT SOX controls.

We are seeking candidates who thrive in a dynamic, fast-paced environment and are comfortable managing regulatory compliance. The ideal candidate will be expected to lead the monitoring of SOX IT compliance requirements, contribute to the design and enhancement of controls, and serve as a key liaison with external auditors. A strong background in continuous monitoring and assessing compliance frameworks is highly desirable.

A solid understanding of the SOX framework is essential, while knowledge of additional compliance frameworks such as SOC1, SOC2, PCI, HIPAA, and ISO is advantageous.

Career Level: IC3

Primary Responsibilities:

• Lead walk-throughs with Oracle’s external auditors, overseeing the testing of the design and operational effectiveness of Oracle’s IT general controls and IT application controls.
• Coordinate and conduct SOX program testing and auditing of IT controls in collaboration with control owners and management teams.
• Assess IT control deficiencies, evaluate their impact, and conduct risk assessments and root cause analysis to determine appropriate management actions. Monitor the remediation process, ensuring closure and reviewing supporting evidence.
• Foster relationships and maintain open communication with a broad range of internal resources and management across various functions.
• Evaluate new products, systems, databases, or changes to existing processes to identify potential financial and operational risks before implementation, providing guidance and recommending improvements to control design.
• Lead benchmarking and process improvement initiatives to enhance controls, increase efficiency, and reduce cycle time for SOX IT compliance.
• Evaluate relevant global standards and compliance frameworks to establish internal standards, guidelines, policies, processes, and procedures.
• Create and maintain documentation to support SOX compliance testing and risk assessment reviews.
• Perform other duties as assigned.

Qualifications:

• Preferred certifications: CISA, CISSP, CRISC, CISM, ISO 27001, Security+, PMP, or other relevant security certifications.
• A minimum of 3 years of relevant experience, with a BA/BS degree.
• Exceptional communication and project management skills.
• Strong technical acumen with the ability to interpret technical specifications.
• Experience in Information Technology, Cloud services, or managed hosting services is preferred.
• Proven ability to meet stringent deadlines in a fast-paced environment, demonstrating a sense of urgency and results-driven approach.
• Internal and third-party auditing experience is required.

Disclaimer:

Certain US customer or client-facing roles may be required to comply with applicable requirements, such as immunization and occupational health mandates.

Range and benefit information provided in this posting are specific to the stated locations only

US: Hiring Range in USD from: $70,600 to $141,200 per annum. May be eligible for bonus and equity.

Oracle maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect Oracle’s differing products, industries and lines of business.
Candidates are typically placed into the range based on the preceding factors as well as internal peer equity.

Oracle US offers a comprehensive benefits package which includes the following:
1. Medical, dental, and vision insurance, including expert medical opinion
2. Short term disability and long term disability
3. Life insurance and AD&D
4. Supplemental life insurance (Employee/Spouse/Child)
5. Health care and dependent care Flexible Spending Accounts
6. Pre-tax commuter and parking benefits
7. 401(k) Savings and Investment Plan with company match
8. Paid time off: Flexible Vacation is provided to all eligible employees assigned to a salaried (non-overtime eligible) position. Accrued Vacation is provided to all other employees eligible for vacation benefits. For employees working at least 35 hours per week, the vacation accrual rate is 13 days annually for the first three years of employment and 18 days annually for subsequent years of employment. Vacation accrual is prorated for employees working between 20 and 34 hours per week. Employees working fewer than 20 hours per week are not eligible for vacation.
9. 11 paid holidays
10. Paid sick leave: 72 hours of paid sick leave upon date of hire. Refreshes each calendar