Associate Director, IT SOX Program Manager-(Hybrid)

$135,500 - $213,400/Yr

Merck & Co. - Rahway, NJ

Full-time - Mid Level

Onsite - Rahway, NJ

1,001-5,000 employees

Chemical Manufacturing

About the position

The Associate Director, IT SOX Program Manager plays a crucial role in overseeing the IT SOX program within the IT Risk & Compliance Programs function. This position is responsible for driving the strategy, delivery, and execution of one of the company's critical compliance programs, collaborating cross-functionally to identify and mitigate risks impacting the IT SOX landscape.

Responsibilities

• Lead the IT SOX PMO to execute various aspects of the program including planning, scoping, and execution.
• Assist with SOX risk assessments, system scoping, and designing IT processes and controls to mitigate financial reporting risks.
• Collaborate closely with the Global Controllers Office, process owners, Internal Audit, external auditors, and other key stakeholders to understand IT processes, risks, and controls.
• Advise on SOX control readiness for new initiatives, system deployments, and automation projects.
• Assist with SOX documentation and related activities, including reviewing and updating process flowcharts and control evidence.
• Monitor IT SOX testing and document IT SOX Controls in coordination with the SOX PMO Global Controllers office.
• Evaluate control deficiencies, assess root causes and impacts, and recommend remediation activities.
• Execute and monitor key IT SOX campaigns, including the Quarterly SOX Survey and User Access Reviews.
• Prepare and present content and materials to SOX oversight committees.
• Lead the creation of an on-demand IT SOX education tool and track mandatory annual training for IT SOX control owners.
• Formalize and own the SOP for the IT SOX Program in line with company policies and standards.
• Identify opportunities to improve the IT SOX Program through optimization and automation.

Requirements

• Bachelor's degree required.
• Over 8 years of relevant experience in Process and Information Technology auditing, focused on internal control reviews around IT SOX and IT General Controls.
• Strong knowledge of internal control frameworks and standards, such as US GAAP, COSO, and SOX.
• Effective project management and organizational skills, with the ability to manage multiple projects simultaneously.
• Excellent interpersonal skills to work closely with people at all levels of the organization.
• Experience with executive-level presentation preparation and delivery.

Nice-to-haves

• Professional credentials including CPA, CISA, MIIA, CIA, or equivalent certifications.
• Experience operating in a highly regulated environment such as health care or finance.
• Broad understanding of end-to-end company operations including research and development, manufacturing, and financial processes.

Benefits

• Health insurance
• Paid holidays
• Retirement plan