<?xml version="1.0" encoding="UTF-8"?>
<source>
  <jobs>
    <job>
      <externalid>038b4893-89b</externalid>
      <Title>IT Audit Lead</Title>
      <Description><![CDATA[<p>We are seeking an IT Audit Lead to join our Management Controls and Internal Audit Group. As an IT Audit Lead, you will be responsible for leading IT audit engagements, planning and carrying out the audit, and continuously working to improve processes and procedures. You will work closely with the Head of Information Technology Audit to develop and maintain an in-depth understanding of the technology organization, business areas, and support functions.</p>
<p>Primary Responsibilities:</p>
<ul>
<li>Lead and perform IT and integrated audit engagements, with support from IT Auditors, focusing on IT core infrastructure, trade execution and trade processing infrastructure, critical applications, and IT general controls;</li>
<li>Build and maintain relationships with key stakeholders, establishing a culture of engagement while adding value;</li>
<li>Develop and maintain an in-depth understanding of the technology organization, business areas, and support functions;</li>
<li>Support the Head of Information Technology Audit with audit planning, scope design, internal control assessment, raising and reporting of issues, and monitoring of remediation plans;</li>
<li>Participate in department-wide initiatives focused on continually improving firm processes and the control environment;</li>
<li>Assist with annual risk assessment process, audit plan creation, and other departmental administrative projects.</li>
</ul>
<p>Qualifications/Skills Required:</p>
<ul>
<li>12+ years of IT audit experience with exposure to core IT infrastructure, cyber security, equities trading, fixed-income trading, operations, and/or trade support functions;</li>
<li>Strong analytical and reporting skills and effective relationship-building experience;</li>
<li>Effective communication (verbal and written) and inter-personal skills, with the ability to present sophisticated and sensitive issues to management and inspire change;</li>
<li>Knowledge and experience of core IT infrastructure platforms (e.g., Windows, Unix, Sybase, SQL), cyber security, cloud technology, networks, firewalls, and/or data analytics;</li>
<li>Extensive knowledge of the audit lifecycle and the evaluation of IT general controls and IT automated controls;</li>
<li>Bachelor’s degree in Information Systems, Computer Science/Engineering, or other relevant fields;</li>
<li>A related certification (e.g., CISA, CISSP, CIA) is desired;</li>
<li>Domestic and international travel requirements: 0%-10%.</li>
</ul>
<p>The estimated base salary range for this position is $160,000 to $250,000, which is specific to New York and may change in the future.</p>
<p style="margin-top:24px;font-size:13px;color:#666;">XML job scraping automation by <a href="https://yubhub.co">YubHub</a></p>]]></Description>
      <Jobtype>full-time</Jobtype>
      <Experiencelevel>senior</Experiencelevel>
      <Workarrangement>onsite</Workarrangement>
      <Salaryrange>$160,000 to $250,000</Salaryrange>
      <Skills>IT audit experience, core IT infrastructure, cyber security, equities trading, fixed-income trading, operations, trade support functions, analytical and reporting skills, relationship-building experience, communication (verbal and written) and inter-personal skills, knowledge of core IT infrastructure platforms, cloud technology, networks, firewalls, data analytics, audit lifecycle, IT general controls, IT automated controls</Skills>
      <Category>IT</Category>
      <Industry>Finance</Industry>
      <Employername>Audit</Employername>
      <Employerlogo>https://logos.yubhub.co/mlp.eightfold.ai.png</Employerlogo>
      <Employerdescription>Millennium is a company that exists to assist with compliance, legal, and ethics oversight.</Employerdescription>
      <Employerwebsite>https://mlp.eightfold.ai</Employerwebsite>
      <Compensationcurrency></Compensationcurrency>
      <Compensationmin></Compensationmin>
      <Compensationmax></Compensationmax>
      <Applyto>https://mlp.eightfold.ai/careers/job/755953849622</Applyto>
      <Location>New York, New York, United States of America</Location>
      <Country></Country>
      <Postedate>2026-04-18</Postedate>
    </job>
    <job>
      <externalid>417bc97b-b9a</externalid>
      <Title>Lead Business Analyst</Title>
      <Description><![CDATA[<p>Some careers have more impact than others. If you&#39;re looking for a career where you can make a real impression, join HSBC and discover how valued you&#39;ll be.</p>
<p>We are currently seeking an experienced professional to join our team in the role of Lead Business Analyst.</p>
<p>Key Responsibilities:</p>
<ul>
<li>Develop, maintain, and implement IT risk management policies, standards, and control frameworks (e.g., ISO27001, NIST, COBIT).</li>
<li>Conduct regular risk assessments and Control Self-Assessments (CSA) for technology initiatives, infrastructure, and information assets.</li>
<li>Establish, monitor, and update Key Risk Indicators (KRIs) and Key Controls to ensure operating effectiveness.</li>
<li>Ensure IT practices comply with local regulations (e.g., HKMA, GDPR, PCI-DSS) and act as a focal point for internal and external audit examinations.</li>
<li>Lead IT incident investigation, perform root cause analysis (RCA), and ensure prompt rectification of control weaknesses.</li>
<li>Oversee information security risk management for vendor onboarding and off-boarding.</li>
</ul>
<p>Requirements:</p>
<ul>
<li>Bachelor&#39;s degree in Information Technology, Computer Science, Information Security, or a related field.</li>
<li>5+ years of relevant experience in technology risk management, IT audit, or IT security within the banking/financial services industry.</li>
<li>Professional certifications such as CISA, CISSP, CISM, CRISC, or similar are strongly preferred.</li>
<li>Understanding of IT general controls (ITGC), cybersecurity best practices, data protection, and cloud security principles.</li>
<li>Familiarity with local financial authority regulations and technical risk management guidelines.</li>
</ul>
<p>Core Skills:</p>
<ul>
<li>Analytical Thinking: Ability to identify and quantify complex technology risks.</li>
<li>Communication: Excellent interpersonal skills to influence and collaborate with first-line business units and stakeholders.</li>
<li>Problem-Solving: Proven ability to define and drive the implementation of remediation plans.</li>
<li>Leadership: Ability to lead IT risk awareness initiatives and work under pressure.</li>
</ul>
<p>You&#39;ll achieve more when you join HSBC. HSBC is an equal opportunity employer committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and, opportunities to grow within an inclusive and diverse environment.</p>
<p style="margin-top:24px;font-size:13px;color:#666;">XML job scraping automation by <a href="https://yubhub.co">YubHub</a></p>]]></Description>
      <Jobtype>full-time</Jobtype>
      <Experiencelevel>senior</Experiencelevel>
      <Workarrangement>onsite</Workarrangement>
      <Salaryrange></Salaryrange>
      <Skills>Analytical Thinking, Communication, Problem-Solving, Leadership, IT General Controls, Cybersecurity Best Practices, Data Protection, Cloud Security Principles, Local Financial Authority Regulations, Technical Risk Management Guidelines</Skills>
      <Category>IT</Category>
      <Industry>Finance</Industry>
      <Employername>HSBC</Employername>
      <Employerlogo>https://logos.yubhub.co/portal.careers.hsbc.com.png</Employerlogo>
      <Employerdescription>HSBC is a multinational banking and financial services organisation with operations in over 80 countries.</Employerdescription>
      <Employerwebsite>https://portal.careers.hsbc.com</Employerwebsite>
      <Compensationcurrency></Compensationcurrency>
      <Compensationmin></Compensationmin>
      <Compensationmax></Compensationmax>
      <Applyto>https://portal.careers.hsbc.com/careers/job/563774610677563</Applyto>
      <Location>Guangzhou</Location>
      <Country></Country>
      <Postedate>2026-04-18</Postedate>
    </job>
    <job>
      <externalid>7a3c1d3f-0e2</externalid>
      <Title>Head of IT SOX</Title>
      <Description><![CDATA[<p>We are seeking a Head of IT SOX to join our Internal Audit SOX team at Anthropic. As the Head of IT SOX, you will lead the organisation&#39;s IT SOX compliance program, with a primary focus on IT General Controls (ITGCs), application controls, and system/process risk assessments.</p>
<p>In this role, you will work cross-functionally with Engineering, Security, IT, DevOps, and Finance to ensure the organisation meets SOX 404 compliance requirements in a rapidly scaling, technology-driven environment.</p>
<p>This is a unique opportunity to build IT SOX controls at an AI-first company, leveraging cutting-edge AI technology to create innovative, automated, and scalable compliance solutions.</p>
<p>You will help define how AI can transform traditional SOX processes,from continuous monitoring to intelligent risk assessment,while maintaining the rigor required for public company compliance.</p>
<p>As the Head of IT SOX, you will own SOX IT planning, scoping, testing, remediation, and reporting activities. You&#39;ll work directly with technical partners to design and implement scalable controls, oversee documentation, and manage communication with external auditors.</p>
<p>This role reports to the Head of Internal Audit and plays a critical part in strengthening internal control maturity as the company scales through pre-IPO readiness and longer term as a public company.</p>
<p>Responsibilities:</p>
<p>SOX IT Program Leadership</p>
<ul>
<li>Lead and manage the organisation&#39;s end-to-end IT SOX compliance program</li>
</ul>
<ul>
<li>Own SOX IT planning, scoping, testing, remediation, and reporting activities</li>
</ul>
<ul>
<li>Build scalable, automated, and sustainable controls to support growth through pre-IPO and post-IPO readiness</li>
</ul>
<ul>
<li>Develop and maintain the SOX IT compliance roadmap aligned with organisational growth</li>
</ul>
<ul>
<li>Pioneer the use of AI and automation technologies to enhance control effectiveness, continuous monitoring, and risk detection</li>
</ul>
<ul>
<li>Drive IT controls rationalisation initiatives to optimise the control environment and increase reliance on IT automated controls (ITACs)</li>
</ul>
<p>ITGC and Application Controls</p>
<ul>
<li>Design, implement, and monitor IT General Controls (ITGCs) across critical systems</li>
</ul>
<ul>
<li>Evaluate and test application controls and IT automated controls (ITACs) to ensure proper functionality and compliance</li>
</ul>
<ul>
<li>Conduct system and process risk assessments to identify control gaps and remediation needs</li>
</ul>
<ul>
<li>Oversee control documentation and ensure audit-ready evidence is maintained</li>
</ul>
<ul>
<li>Assess and monitor Systems Development Life Cycle (SDLC) controls for new system implementations and changes</li>
</ul>
<p>Cross-Functional Partnership</p>
<ul>
<li>Partner with Engineering, Security, IT, DevOps, and Finance teams to implement scalable controls</li>
</ul>
<ul>
<li>Work directly with technical partners to design controls that align with business operations</li>
</ul>
<ul>
<li>Collaborate with process owners to identify control improvements and automation opportunities</li>
</ul>
<ul>
<li>Support SEC cybersecurity disclosure requirements and ongoing monitoring of cyber risks</li>
</ul>
<p>External Audit Management</p>
<ul>
<li>Serve as the primary point of contact for external auditors on IT SOX matters</li>
</ul>
<ul>
<li>Manage audit requests, coordinate testing schedules, and facilitate audit walkthroughs</li>
</ul>
<ul>
<li>Track and report on IT SOX compliance status to leadership, the Board, and Audit Committee</li>
</ul>
<p>If you have 10+ years of hands-on IT audit and SOX compliance experience, preferably in both Big 4 and in-house internal audit/SOX leadership roles at a fast-paced technology company, you may be a good fit for this role.</p>
<p style="margin-top:24px;font-size:13px;color:#666;">XML job scraping automation by <a href="https://yubhub.co">YubHub</a></p>]]></Description>
      <Jobtype>full-time</Jobtype>
      <Experiencelevel>senior</Experiencelevel>
      <Workarrangement>hybrid</Workarrangement>
      <Salaryrange>$300,000-$360,000 USD</Salaryrange>
      <Skills>IT General Controls (ITGCs), application controls, system/process risk assessments, SOX 404 compliance, AI technology, automated and scalable compliance solutions, continuous monitoring, intelligent risk assessment, public company compliance, SOX IT planning, scoping, testing, remediation, reporting activities, scalable controls, documentation, communication with external auditors, internal control maturity, pre-IPO readiness, post-IPO readiness, IT controls rationalisation, IT automated controls (ITACs), Systems Development Life Cycle (SDLC) controls, cybersecurity disclosure requirements, cyber risks</Skills>
      <Category>IT</Category>
      <Industry>Technology</Industry>
      <Employername>Anthropic</Employername>
      <Employerlogo>https://logos.yubhub.co/anthropic.com.png</Employerlogo>
      <Employerdescription>Anthropic is an AI-first company that aims to create reliable, interpretable, and steerable AI systems.</Employerdescription>
      <Employerwebsite>https://www.anthropic.com/</Employerwebsite>
      <Compensationcurrency></Compensationcurrency>
      <Compensationmin></Compensationmin>
      <Compensationmax></Compensationmax>
      <Applyto>https://job-boards.greenhouse.io/anthropic/jobs/5061691008</Applyto>
      <Location>San Francisco, CA</Location>
      <Country></Country>
      <Postedate>2026-04-18</Postedate>
    </job>
    <job>
      <externalid>0c1f85bb-c33</externalid>
      <Title>Senior Product Manager, Compliance</Title>
      <Description><![CDATA[<p>CoreWeave is building the infrastructure that powers the next era of AI. As we scale towards and beyond public company readiness, the CIO organisation is responsible for owning the execution of IT General Controls (ITGCs) and IT application controls across our technology environment.</p>
<p>We are looking for a Senior Product Manager, IT SOX Compliance to join our team. This is not a traditional audit-support role. As the Product Manager, IT SOX Compliance, you will translate SOX compliance requirements into structured programs, drive accountability across IT process owners, and build the systems and workflows that make compliance scalable.</p>
<p>Key responsibilities include:</p>
<ul>
<li>Owning the end-to-end IT SOX compliance program within the CIO organisation, maintaining the IT control inventory spanning ITGCs, IT-dependent controls, and automated application controls</li>
<li>Owning the control design and documentation, including narratives and risk and control matrices (RCMs), ensuring controls are clearly defined and audit-ready</li>
<li>Partnering with IT, Accounting (where needed), and the SOX team to ensure new systems and modules are implemented with appropriate SDLC controls in place prior to go-live; reviewing control designs to identify and mitigate SOX risks</li>
<li>On an ongoing basis, partnering with IT process owners and control operators to ensure controls are executed in a timely manner</li>
<li>Reviewing control evidence for quality and completeness before submission to auditors</li>
<li>Managing the full deficiency lifecycle , from root cause analysis through remediation planning, retesting, and escalation , reporting control health to IT leadership and the SOX team</li>
<li>Leading root cause analysis for control failures and incidents, tracking and resolving systemic gaps, and implementing and validating remediation plans to prevent recurrence</li>
</ul>
<p>You will work closely with the SOX team and IT process owners to ensure controls are designed, reviewed, and evidenced effectively.</p>
<p>The ideal candidate will have 8+ years of experience in IT audit, IT risk, IT compliance, or a related field, with hands-on IT SOX experience in either a practitioner or oversight capacity. You will have deep familiarity with IT General Controls (ITGCs) , access management, change management, SDLC, and computer operations , and how they map to financial reporting risk.</p>
<p>In addition to a competitive salary declaration, we offer a variety of benefits to support your needs, including medical, dental, and vision insurance, company-paid life insurance, voluntary supplemental life insurance, short and long-term disability insurance, flexible spending account, health savings account, tuition reimbursement, ability to participate in employee stock purchase program (ESPP), mental wellness benefits through Spring Health, family-forming support provided by Carrot, paid parental leave, flexible, full-service childcare support with Kinside, 401(k) with a generous employer match, flexible PTO, catered lunch each day in our office and data center locations, a casual work environment, and a work culture focused on innovative disruption.</p>
<p>Why CoreWeave?</p>
<p>At CoreWeave, we work hard, have fun, and move fast! We&#39;re in an exciting stage of hyper-growth that you will not want to miss out on. We&#39;re not afraid of a little chaos, and we&#39;re constantly learning. Our team cares deeply about how we build our product and how we work together, which is represented through our core values: Be Curious at Your Core, Act Like an Owner, Empower Employees, Deliver Best-in-Class Client Experiences, Achieve More Together.</p>
<p>We support and encourage an entrepreneurial outlook and independent thinking. We foster an environment that encourages collaboration and enables the development of innovative solutions to complex problems. As we get set for takeoff, the organisation&#39;s growth opportunities are constantly expanding. You will be surrounded by some of the best talent in the industry, who will want to learn from you, too.</p>
<p style="margin-top:24px;font-size:13px;color:#666;">XML job scraping automation by <a href="https://yubhub.co">YubHub</a></p>]]></Description>
      <Jobtype>full-time</Jobtype>
      <Experiencelevel>senior</Experiencelevel>
      <Workarrangement>hybrid</Workarrangement>
      <Salaryrange>$165,000 to $242,000</Salaryrange>
      <Skills>IT General Controls (ITGCs), SOX compliance, IT audit, IT risk, IT compliance, Access management, Change management, SDLC, Computer operations, Workday, Salesforce, NetSuite/SAP, Coupa, GRC platforms, AuditBoard, ServiceNow GRC, Workiva, CISA, CISSP, CISM, CPA, Hyperscaler, Cloud infrastructure, High-growth tech environment</Skills>
      <Category>IT</Category>
      <Industry>Technology</Industry>
      <Employername>CoreWeave</Employername>
      <Employerlogo>https://logos.yubhub.co/coreweave.com.png</Employerlogo>
      <Employerdescription>CoreWeave is a cloud infrastructure company that provides a platform for building and scaling AI applications.</Employerdescription>
      <Employerwebsite>https://www.coreweave.com</Employerwebsite>
      <Compensationcurrency></Compensationcurrency>
      <Compensationmin></Compensationmin>
      <Compensationmax></Compensationmax>
      <Applyto>https://job-boards.greenhouse.io/coreweave/jobs/4673532006</Applyto>
      <Location>Livingston, NJ / New York, NY / Sunnyvale, CA / San Francisco, CA / Bellevue, WA</Location>
      <Country></Country>
      <Postedate>2026-04-18</Postedate>
    </job>
    <job>
      <externalid>0bf3955d-b31</externalid>
      <Title>IT Audit Analyst</Title>
      <Description><![CDATA[<p>We are looking for a dynamic and detail-oriented IT Audit Analyst or Senior IT Audit Analyst to join our growing Internal Audit team.</p>
<p>In this role, you will play a key part in evaluating and strengthening ZoomInfo&#39;s IT control environment, with a primary focus on executing SOX compliance testing across IT general controls, automated controls, and system integrations.</p>
<p>This position offers meaningful exposure to US GAAP, SOX compliance, and complex IT control environments, as well as the opportunity to work with automation and AI-driven tools.</p>
<p>You will work closely with US-based teams and stakeholders across IT and business functions, requiring a shifted schedule with availability until 12:00 PM PST to enable effective collaboration.</p>
<p>The ideal candidate brings strong analytical and communication skills, a proactive approach to problem solving, and a desire to grow in a fast-paced, high-growth SaaS environment.</p>
<p>Key Responsibilities:</p>
<ul>
<li>Execute IT audit plans including evaluation of IT general controls (ITGCs), automated controls, application controls, and system integrations in support of ZoomInfo&#39;s SOX compliance program</li>
</ul>
<ul>
<li>Conduct risk and control assessments across IT environments, identifying control gaps and providing practical recommendations for improvement and remediation</li>
</ul>
<ul>
<li>Perform SOX compliance testing for IT general controls across key domains including access management, change management, computer operations, and system development</li>
</ul>
<ul>
<li>Document audit workpapers clearly and thoroughly, ensuring documentation meets professional standards and supports audit conclusions</li>
</ul>
<ul>
<li>Communicate audit findings effectively, including control deficiencies, root cause analysis, and recommended remediation steps, to both technical and non-technical stakeholders</li>
</ul>
<ul>
<li>Partner with IT and business unit stakeholders to build collaborative relationships and ensure effective audit outcomes</li>
</ul>
<ul>
<li>Support the monitoring of management action plans and remediation efforts related to identified control deficiencies</li>
</ul>
<ul>
<li>Leverage audit management technology (AuditBoard) and data analytics tools to enhance audit efficiency and quality</li>
</ul>
<ul>
<li>Contribute to the continuous improvement of audit methodologies, tools, and best practices, including the adoption of AI and automation capabilities</li>
</ul>
<ul>
<li>Stay current on changes in the IT landscape, regulatory environment, and industry trends to assess impacts on ZoomInfo&#39;s IT risk and control profile</li>
</ul>
<p>Required Qualifications:</p>
<ul>
<li>Bachelor&#39;s degree in Accounting, Finance, Management Information Systems, Business Administration, or a related field</li>
</ul>
<ul>
<li>CISA, CA or equivalent certification in good standing</li>
</ul>
<ul>
<li>IT Audit Analyst: 3+ years of experience in IT audit, IT risk, or SOX compliance within a public company, Big 4 accounting firm, or equivalent corporate setting</li>
</ul>
<ul>
<li>Senior IT Audit Analyst: 5+ years of experience in IT audit, IT risk, or SOX compliance within a public company, Big 4 accounting firm, or equivalent corporate setting</li>
</ul>
<ul>
<li>Strong knowledge of IT general controls (ITGCs), automated controls, and IT risk assessment practices</li>
</ul>
<ul>
<li>Solid understanding of SOX requirements, COSO framework, and COBIT standards as they relate to IT audit</li>
</ul>
<ul>
<li>Familiarity with cloud-based platforms, SaaS applications, databases, and middleware solutions in the context of IT audit and SOX compliance</li>
</ul>
<ul>
<li>Experience working with audit management technology; AuditBoard experience preferred</li>
</ul>
<ul>
<li>Strong experience with data analytics and automation tools as applied to internal audit</li>
</ul>
<ul>
<li>Excellent written and verbal communication skills in English, with the ability to present findings clearly to both technical and non-technical stakeholders</li>
</ul>
<ul>
<li>Strong analytical, critical thinking, and problem-solving skills with the ability to manage multiple priorities and meet deadlines</li>
</ul>
<ul>
<li>Ability to work independently and collaboratively in a fast-paced, global environment</li>
</ul>
<p>Preferred Qualifications:</p>
<ul>
<li>Experience with enterprise SaaS applications such as Salesforce, Workday, or Okta in an audit or controls context</li>
</ul>
<ul>
<li>Hands-on experience with data visualization tools and advanced analytics techniques</li>
</ul>
<ul>
<li>Familiarity with scripting or programming concepts such as Python as applied to audit automation and data analysis</li>
</ul>
<ul>
<li>Familiarity with artificial intelligence and prompt engineering as applied to audit and risk management workflows</li>
</ul>
<ul>
<li>Experience with agile audit methodologies or continuous auditing frameworks</li>
</ul>
<p style="margin-top:24px;font-size:13px;color:#666;">XML job scraping automation by <a href="https://yubhub.co">YubHub</a></p>]]></Description>
      <Jobtype>full-time</Jobtype>
      <Experiencelevel>senior</Experiencelevel>
      <Workarrangement>hybrid</Workarrangement>
      <Salaryrange></Salaryrange>
      <Skills>SOX compliance, IT general controls, automated controls, application controls, system integrations, audit management technology, data analytics tools, AI-driven tools, cloud-based platforms, SaaS applications, databases, middleware solutions, CISA, CA, SOX requirements, COSO framework, COBIT standards, enterprise SaaS applications, data visualization tools, advanced analytics techniques, scripting or programming concepts, Python, artificial intelligence, prompt engineering, agile audit methodologies, continuous auditing frameworks</Skills>
      <Category>IT</Category>
      <Industry>Technology</Industry>
      <Employername>ZoomInfo</Employername>
      <Employerlogo>https://logos.yubhub.co/zoominfo.com.png</Employerlogo>
      <Employerdescription>ZoomInfo is a leading provider of go-to-market intelligence solutions, serving over 35,000 companies worldwide.</Employerdescription>
      <Employerwebsite>https://www.zoominfo.com/</Employerwebsite>
      <Compensationcurrency></Compensationcurrency>
      <Compensationmin></Compensationmin>
      <Compensationmax></Compensationmax>
      <Applyto>https://job-boards.greenhouse.io/zoominfo/jobs/8441742002</Applyto>
      <Location>Chennai, Tamil Nadu, India</Location>
      <Country></Country>
      <Postedate>2026-04-18</Postedate>
    </job>
    <job>
      <externalid>5627f042-ed8</externalid>
      <Title>Head of IT SOX</Title>
      <Description><![CDATA[<p>We are seeking a Head of IT SOX to join our Internal Audit SOX team at Anthropic. As the Head of IT SOX, you will lead the organisation&#39;s IT SOX compliance program, with a primary focus on IT General Controls (ITGCs), application controls, and system/process risk assessments.</p>
<p>In this role, you will work cross-functionally with Engineering, Security, IT, DevOps, and Finance to ensure the organisation meets SOX 404 compliance requirements in a rapidly scaling, technology-driven environment.</p>
<p>This is a unique opportunity to build IT SOX controls at an AI-first company, leveraging cutting-edge AI technology to create innovative, automated, and scalable compliance solutions.</p>
<p>As the Head of IT SOX, you will own SOX IT planning, scoping, testing, remediation, and reporting activities. You&#39;ll work directly with technical partners to design and implement scalable controls, oversee documentation, and manage communication with external auditors.</p>
<p>Responsibilities:</p>
<ul>
<li>Lead and manage the organisation&#39;s end-to-end IT SOX compliance program</li>
<li>Own SOX IT planning, scoping, testing, remediation, and reporting activities</li>
<li>Build scalable, automated, and sustainable controls to support growth through pre-IPO and post-IPO readiness</li>
<li>Develop and maintain the SOX IT compliance roadmap aligned with organisational growth</li>
<li>Pioneer the use of AI and automation technologies to enhance control effectiveness, continuous monitoring, and risk detection</li>
<li>Drive IT controls rationalisation initiatives to optimise the control environment and increase reliance on IT automated controls (ITACs)</li>
</ul>
<p>ITGC and Application Controls:</p>
<ul>
<li>Design, implement, and monitor IT General Controls (ITGCs) across critical systems</li>
<li>Evaluate and test application controls and IT automated controls (ITACs) to ensure proper functionality and compliance</li>
<li>Conduct system and process risk assessments to identify control gaps and remediation needs</li>
<li>Oversee control documentation and ensure audit-ready evidence is maintained</li>
<li>Assess and monitor Systems Development Life Cycle (SDLC) controls for new system implementations and changes</li>
</ul>
<p>Cross-Functional Partnership:</p>
<ul>
<li>Partner with Engineering, Security, IT, DevOps, and Finance teams to implement scalable controls</li>
<li>Work directly with technical partners to design controls that align with business operations</li>
<li>Collaborate with process owners to identify control improvements and automation opportunities</li>
<li>Support SEC cybersecurity disclosure requirements and ongoing monitoring of cyber risks</li>
</ul>
<p>External Audit Management:</p>
<ul>
<li>Serve as the primary point of contact for external auditors on IT SOX matters</li>
<li>Manage audit requests, coordinate testing schedules, and facilitate audit walkthroughs</li>
<li>Track and report on IT SOX compliance status to leadership, the Board, and Audit Committee</li>
</ul>
<p>You may be a good fit if you:</p>
<ul>
<li>Have 10+ years of hands-on IT audit and SOX compliance experience, preferably in both Big 4 and in-house internal audit/SOX leadership roles at a fast-paced technology company</li>
<li>Have proven ability to establish or scale SOX IT compliance programs at newly public or pre-IPO companies</li>
<li>Possess deep understanding of ITGCs, application controls, and risk assessments</li>
<li>Have strong project management, analytical, and communication skills</li>
<li>Hold a Bachelor&#39;s degree in Information Systems, Computer Science, Accounting, or a related field</li>
<li>Are passionate about building scalable processes that support organisational growth and Anthropic&#39;s mission to create safe AI</li>
</ul>
<p>Strong candidates may also have:</p>
<ul>
<li>Experience with Workday, Salesforce, NetSuite, GitHub, or other enterprise business systems</li>
<li>CISA, CIA, CPA, or similar certification</li>
<li>Experience supporting rapid company growth and scaling compliance programs accordingly</li>
<li>Interest in or experience applying AI/ML technologies to audit, compliance, or risk management processes</li>
<li>Understanding of financial data security and compliance requirements</li>
<li>Experience working at a high-growth AI or technology company</li>
<li>Familiarity with auditing modern software development environments</li>
</ul>
<p>The annual compensation range for this role is $300,000-$360,000 USD.</p>
<p style="margin-top:24px;font-size:13px;color:#666;">XML job scraping automation by <a href="https://yubhub.co">YubHub</a></p>]]></Description>
      <Jobtype>full-time</Jobtype>
      <Experiencelevel>senior</Experiencelevel>
      <Workarrangement>hybrid</Workarrangement>
      <Salaryrange>$300,000-$360,000 USD</Salaryrange>
      <Skills>SOX compliance, IT General Controls, application controls, risk assessments, project management, analytical skills, communication skills, AI and automation technologies, continuous monitoring, risk detection, IT controls rationalisation, IT automated controls, Systems Development Life Cycle, cybersecurity disclosure requirements</Skills>
      <Category>IT</Category>
      <Industry>Technology</Industry>
      <Employername>Anthropic</Employername>
      <Employerlogo>https://logos.yubhub.co/anthropic.com.png</Employerlogo>
      <Employerdescription>Anthropic is an AI-first company that aims to create reliable, interpretable, and steerable AI systems.</Employerdescription>
      <Employerwebsite>https://www.anthropic.com/</Employerwebsite>
      <Compensationcurrency></Compensationcurrency>
      <Compensationmin></Compensationmin>
      <Compensationmax></Compensationmax>
      <Applyto>https://job-boards.greenhouse.io/anthropic/jobs/5061691008</Applyto>
      <Location>San Francisco, CA</Location>
      <Country></Country>
      <Postedate>2026-04-18</Postedate>
    </job>
    <job>
      <externalid>d4a404fe-902</externalid>
      <Title>SAP Security/GRC Senior Consultant</Title>
      <Description><![CDATA[<p>Do you want to boost your career and collaborate with expert, talented colleagues to solve and deliver against our clients&#39; most important challenges? We are growing and are looking for people to join our team. You&#39;ll be part of an entrepreneurial, high-growth environment of 300,000 employees. Our dynamic organization allows you to work across functional business pillars, contributing your ideas, experiences, diverse thinking, and a strong mindset. Are you ready?</p>
<p>As a SAP Security/GRC Consultant, you will work closely with diverse clients to assess their SAP security risks, design and implement tailored SAP Security and Governance, Risk &amp; Compliance (GRC) solutions, and drive successful project delivery. You will act as a trusted advisor, helping clients align SAP security frameworks with business objectives and compliance mandates.</p>
<p><strong>Responsibilities</strong></p>
<ul>
<li>Lead SAP Security and GRC assessment, design, and implementation projects for clients across industries.</li>
<li>Conduct client workshops and requirements gathering sessions to understand business and security needs.</li>
<li>Design and configure SAP security roles, authorizations, and GRC Access Control components (Access Risk Analysis, Emergency Access Management, Access Request Management).</li>
<li>Develop and enforce Segregation of Duties (SoD) policies to mitigate risks and ensure compliance.</li>
<li>Deliver SAP Security and GRC gap analysis, risk assessments, and remediation plans.</li>
<li>Support clients during audits by preparing documentation, reports, and facilitating access reviews.</li>
<li>Collaborate with cross-functional teams including Basis, functional consultants, and IT auditors to implement secure SAP landscapes.</li>
<li>Conduct end-user training sessions and knowledge transfer workshops.</li>
<li>Stay abreast of SAP security trends, new releases, and regulatory changes to provide proactive consulting.</li>
</ul>
<p><strong>Requirements</strong></p>
<ul>
<li>5-8 years of consulting experience is necessary.</li>
<li>3+ years of SAP Security and GRC consulting experience with multiple end-to-end implementations.</li>
<li>Hands-on expertise with SAP ECC and/or S/4HANA Security.</li>
<li>Strong experience configuring SAP GRC Access Control modules (Access Risk Analysis, Emergency Access Management, Access Request Management).</li>
<li>Excellent client-facing and communication skills with the ability to explain technical concepts to non-technical stakeholders.</li>
<li>Proven track record of managing multiple client engagements and delivering quality results on time.</li>
</ul>
<ul>
<li>Functional / Content Skills</li>
</ul>
<ul>
<li>Strong knowledge of Sarbanes-Oxley (SOX) , Business Process controls, IT General Controls and IT governance.</li>
<li>Deep understanding and practical experience Analysis and Design/Re-Design of Business process and IT General controls in SAP and Non-SAP landscape.</li>
<li>Strong analytical skills and a deep understanding of the overall context of underlying business processes and technologies.</li>
<li>Understanding the purpose, procedures and ways of work of internal/external audits.</li>
<li>Ability to support audits and to provide the right information &amp; data, and to mitigate and/or solve identified deficiencies and gaps.</li>
</ul>
<ul>
<li>Technical Skills (Data, Technology, Implementation)</li>
</ul>
<ul>
<li>Ability to retrieve and analyze and report/present data from various sources.</li>
<li>Understanding of data structures, sources, flow and integration across infrastructure platforms, functional domains, and application landscapes/service.</li>
<li>Up-to-date understanding of Concepts &amp; Integration of Cloud Services, and multi-cloud environments</li>
</ul>
<ul>
<li>Tool Skill Requirements</li>
</ul>
<ul>
<li>A variety of ERP systems (SAP &amp; Non-SAP), Operating systems, Databases and financial applications</li>
<li>Identity and Access Management solutions and monitoring solutions such as Splunk, Qualys, Tripwire, but also in Authorization &amp; SoD</li>
<li>Analytics &amp; reporting in area of ITGC/GRC</li>
<li>IT Service Management Tools, Market Leader (SNOW, BMC, JIRA, ..)</li>
</ul>
<ul>
<li>Experience with SAP Identity Management (IdM).</li>
</ul>
<ul>
<li>Knowledge of cloud-based SAP security and hybrid environments.</li>
<li>Experience working in Agile/Scrum environments.</li>
<li>Experience in global delivery and working with offshore resources.</li>
<li>Project-related mobility/willingness to travel</li>
</ul>
<ul>
<li>Qualifications and certifications</li>
</ul>
<ul>
<li>Bachelor’s degree in Computer Science, Information Technology, or related field.</li>
<li>More than 7 years of experience in Financial / IT compliance, risk management, IT audit and/or IT controls; strong experience in an audit firm (e.g. Big Four).</li>
<li>SAP Security or GRC certifications are a plus (e.g., SAP Certified Technology Associate – SAP Access Control).</li>
</ul>
<p>_Given that this is just a short snapshot of the role we encourage you to apply even if you don&#39;t meet all the requirements listed above. We are looking for team members who strive to make an impact and are eager to learn. If this sounds like you and you feel you have the skills and experience required, then please_ _<strong>apply now.</strong>_</p>
<p style="margin-top:24px;font-size:13px;color:#666;">XML job scraping automation by <a href="https://yubhub.co">YubHub</a></p>]]></Description>
      <Jobtype>full-time</Jobtype>
      <Experiencelevel>senior</Experiencelevel>
      <Workarrangement>remote</Workarrangement>
      <Salaryrange></Salaryrange>
      <Skills>SAP Security, SAP GRC, SAP ECC, SAP S/4HANA Security, SAP GRC Access Control, Sarbanes-Oxley (SOX), Business Process controls, IT General Controls, IT governance, Analysis and Design/Re-Design of Business process and IT General controls, Strong analytical skills, Understanding of data structures, Understanding of data sources, Understanding of data flow and integration, Up-to-date understanding of Concepts &amp; Integration of Cloud Services, Multi-cloud environments, Identity and Access Management solutions, Monitoring solutions, Authorization &amp; SoD, Analytics &amp; reporting in area of ITGC/GRC, IT Service Management Tools, SAP Identity Management (IdM), Cloud-based SAP security and hybrid environments, Agile/Scrum environments, Global delivery and working with offshore resources, Project-related mobility/willingness to travel</Skills>
      <Category>IT</Category>
      <Industry>Consulting</Industry>
      <Employername>Infosys Consulting - Europe</Employername>
      <Employerlogo>https://logos.yubhub.co/view.com.png</Employerlogo>
      <Employerdescription>Infosys Consulting is a globally renowned management consulting firm that works with market leading brands across sectors. It is a mid-size consultancy within the scale of Infosys, a top-5 powerhouse IT brand.</Employerdescription>
      <Employerwebsite>https://jobs.workable.com</Employerwebsite>
      <Compensationcurrency></Compensationcurrency>
      <Compensationmin></Compensationmin>
      <Compensationmax></Compensationmax>
      <Applyto>https://jobs.workable.com/view/caqAF5TaE7H7j3KrqmrMAp/remote-sap-security%2Fgrc-senior-consultant-role-in-united-kingdom-at-infosys-consulting---europe</Applyto>
      <Location>United Kingdom</Location>
      <Country></Country>
      <Postedate>2026-03-09</Postedate>
    </job>
    <job>
      <externalid>16051af0-2b0</externalid>
      <Title>SAP Security/GRC Consultant- Poland</Title>
      <Description><![CDATA[<p>Do you want to boost your career and collaborate with expert, talented colleagues to solve and deliver against our clients&#39; most important challenges? We are growing and are looking for people to join our team. You&#39;ll be part of an entrepreneurial, high-growth environment of 300,000 employees. Our dynamic organization allows you to work across functional business pillars, contributing your ideas, experiences, diverse thinking, and a strong mindset. Are you ready?</p>
<p>The Digital Platforms Practice helps some of the largest global firms and most recognizable brands deliver value and business transformation enabled by digital ERP solutions and services. Our ERP services, covering strategy, implementation and innovation, help clients deliver true value and achieve their transformation agenda.</p>
<p>As a SAP Security/GRC Consultant, you will work closely with diverse clients to assess their SAP security risks, design and implement tailored SAP Security and Governance, Risk &amp; Compliance (GRC) solutions, and drive successful project delivery. You will act as a trusted advisor, helping clients align SAP security frameworks with business objectives and compliance mandates.</p>
<p><strong>Responsibilities</strong></p>
<ul>
<li>Lead SAP Security and GRC assessment, design, and implementation projects for clients across industries.</li>
<li>Conduct client workshops and requirements gathering sessions to understand business and security needs.</li>
<li>Design and configure SAP security roles, authorizations, and GRC Access Control components (Access Risk Analysis, Emergency Access Management, Access Request Management).</li>
<li>Develop and enforce Segregation of Duties (SoD) policies to mitigate risks and ensure compliance.</li>
<li>Deliver SAP Security and GRC gap analysis, risk assessments, and remediation plans.</li>
<li>Support clients during audits by preparing documentation, reports, and facilitating access reviews.</li>
<li>Collaborate with cross-functional teams including Basis, functional consultants, and IT auditors to implement secure SAP landscapes.</li>
<li>Conduct end-user training sessions and knowledge transfer workshops.</li>
<li>Stay abreast of SAP security trends, new releases, and regulatory changes to provide proactive consulting.</li>
</ul>
<p><strong>Requirements</strong></p>
<ul>
<li>At least 5 years of consulting experience is necessary.</li>
<li>3+ years of SAP Security and GRC consulting experience with multiple end-to-end implementations.</li>
<li>Hands-on expertise with SAP ECC and/or S/4HANA Security.</li>
<li>Strong experience configuring SAP GRC Access Control modules (Access Risk Analysis, Emergency Access Management, Access Request Management).</li>
<li>Excellent client-facing and communication skills with the ability to explain technical concepts to non-technical stakeholders.</li>
<li>Proven track record of managing multiple client engagements and delivering quality results on time.</li>
</ul>
<ul>
<li>Functional / Content Skills</li>
</ul>
<ul>
<li>Strong knowledge of Sarbanes-Oxley (SOX) , Business Process controls, IT General Controls and IT governance.</li>
<li>Deep understanding and practical experience Analysis and Design/Re-Design of Business process and IT General controls in SAP and Non-SAP landscape.</li>
<li>Strong analytical skills and a deep understanding of the overall context of underlying business processes and technologies.</li>
<li>Understanding the purpose, procedures and ways of work of internal/external audits.</li>
<li>Ability to support audits and to provide the right information &amp; data, and to mitigate and/or solve identified deficiencies and gaps.</li>
</ul>
<ul>
<li>Technical Skills (Data, Technology, Implementation)</li>
</ul>
<ul>
<li>Ability to retrieve and analyze and report/present data from various sources.</li>
<li>Understanding of data structures, sources, flow and integration across infrastructure platforms, functional domains, and application landscapes/service.</li>
<li>Up-to-date understanding of Concepts &amp; Integration of Cloud Services, and multi-cloud environments</li>
</ul>
<ul>
<li>Tool Skill Requirements</li>
</ul>
<ul>
<li>A variety of ERP systems (SAP &amp; Non-SAP), Operating systems, Databases and financial applications</li>
<li>Identity and Access Management solutions and monitoring solutions such as Splunk, Qualys, Tripwire, but also in Authorization &amp; SoD</li>
<li>Analytics &amp; reporting in area of ITGC/GRC</li>
<li>IT Service Management Tools, Market Leader (SNOW, BMC, JIRA, ..)</li>
</ul>
<ul>
<li>Experience with SAP Identity Management (IdM).</li>
</ul>
<ul>
<li>Knowledge of cloud-based SAP security and hybrid environments.</li>
<li>Experience working in Agile/Scrum environments.</li>
<li>Experience in global delivery and working with offshore resources.</li>
<li>Project-related mobility/willingness to travel</li>
</ul>
<ul>
<li>Qualifications and certifications</li>
</ul>
<ul>
<li>Bachelor’s degree in Computer Science, Information Technology, or related field.</li>
<li>More than 7 years of experience in Financial / IT compliance, risk management, IT audit and/or IT controls; strong experience in an audit firm (e.g. Big Four).</li>
<li>SAP Security or GRC certifications are a plus (e.g., SAP Certified Technology Associate – SAP Access Control).</li>
</ul>
<p><strong>Benefits</strong></p>
<p>We offer industry-leading compensation and benefits, along with top training and development opportunities so that you can grow your career and achieve your personal goals. Curious to learn more? We’d love to hear from you.... Apply today!</p>
<p style="margin-top:24px;font-size:13px;color:#666;">XML job scraping automation by <a href="https://yubhub.co">YubHub</a></p>]]></Description>
      <Jobtype>full-time</Jobtype>
      <Experiencelevel>senior</Experiencelevel>
      <Workarrangement>onsite</Workarrangement>
      <Salaryrange></Salaryrange>
      <Skills>SAP Security, GRC, SAP ECC, S/4HANA Security, SAP GRC Access Control, Sarbanes-Oxley (SOX), Business Process controls, IT General Controls, IT governance, Analysis and Design/Re-Design of Business process and IT General controls, SAP and Non-SAP landscape, Identity and Access Management solutions, Monitoring solutions, Analytics &amp; reporting, IT Service Management Tools, SAP Identity Management (IdM), Cloud-based SAP security and hybrid environments, Agile/Scrum environments, Global delivery and offshore resources, Project-related mobility</Skills>
      <Category>IT</Category>
      <Industry>Consulting</Industry>
      <Employername>Infosys Consulting - Europe</Employername>
      <Employerlogo>https://logos.yubhub.co/view.com.png</Employerlogo>
      <Employerdescription>Infosys Consulting is a globally renowned management consulting firm that works with market leading brands across sectors. It is a mid-size consultancy within the scale of Infosys, a top-5 powerhouse IT brand.</Employerdescription>
      <Employerwebsite>https://jobs.workable.com</Employerwebsite>
      <Compensationcurrency></Compensationcurrency>
      <Compensationmin></Compensationmin>
      <Compensationmax></Compensationmax>
      <Applyto>https://jobs.workable.com/view/fUHbJmygaqVeehYWCazHTH/sap-security%2Fgrc-consultant--poland-in-wroc%C5%82aw-at-infosys-consulting---europe</Applyto>
      <Location>Wrocław, Lower Silesian Voivodeship, Poland</Location>
      <Country></Country>
      <Postedate>2026-03-09</Postedate>
    </job>
    <job>
      <externalid>f7bc3829-4cd</externalid>
      <Title>IT Auditor, Sr Associate/Staff</Title>
      <Description><![CDATA[<p><strong>Overview</strong></p>
<p>At Synopsys, we drive the innovations that shape the way we live and connect. Our technology is central to the Era of Pervasive Intelligence, from self-driving cars to learning machines. We lead in chip design, verification, and IP integration, empowering the creation of high-performance silicon chips and software content.</p>
<p><strong>Job Description</strong></p>
<p>We are seeking a motivated and detail-oriented audit professional with a strong interest in technology, information security, and risk management. You will be responsible for planning and executing IT and/or Information Security audits in accordance with the annual audit plan. You will also perform IT risk assessments to identify key risks and support the development and refinement of the annual IT audit plan.</p>
<p><strong>Responsibilities</strong></p>
<ul>
<li>Planning and executing IT and/or Information Security audits in accordance with the annual audit plan.</li>
<li>Performing IT risk assessments to identify key risks and support the development and refinement of the annual IT audit plan.</li>
<li>Evaluating the design and operating effectiveness of IT General Controls (ITGCs) and, where applicable, IT Application Controls.</li>
<li>Supporting SOX compliance activities, including walkthroughs, control testing, issue identification, and remediation follow-up.</li>
<li>Conducting audits over key systems and platforms, including ERP and cloud-based applications (e.g., SAP and/or Salesforce).</li>
<li>Collaborating with business, IT, and Information Security stakeholders to understand processes, risks, and controls.</li>
<li>Preparing clear, concise audit documentation, reports, and presentations that communicate findings, risks, and recommendations.</li>
<li>Tracking and validating remediation of audit findings and control deficiencies.</li>
<li>Staying current on emerging technology risks, regulatory expectations, and industry best practices related to IT and cybersecurity.</li>
</ul>
<p><strong>Benefits</strong></p>
<p>At Synopsys, innovation is driven by our incredible team around the world. We feel honored to work alongside such talented and passionate individuals who choose to make a difference here every day. We&#39;re proud to provide the comprehensive benefits and rewards that our team truly deserves.</p>
<ul>
<li>Health &amp; Wellness: Comprehensive medical and healthcare plans that work for you and your family.</li>
<li>Time Away: In addition to company holidays, we have ETO and FTO Programs.</li>
<li>Family Support: Maternity and paternity leave, parenting resources, adoption and surrogacy assistance, and more.</li>
<li>ESPP: Purchase Synopsys common stock at a 15% discount, with a 24 month look-back.</li>
<li>Retirement Plans: Save for your future with our retirement plans that vary by region and country.</li>
<li>Compensation: Competitive salaries.</li>
</ul>
<p><strong>Team</strong></p>
<p>You will join a collaborative and forward-thinking Internal Audit team that partners closely with the business and technology functions. The team values quality, integrity, and open communication, and provides opportunities to work across a broad range of systems, processes, and risks. You&#39;ll gain exposure to senior stakeholders, develop your technical and audit expertise, and play a meaningful role in strengthening the organization&#39;s control environment.</p>
<p style="margin-top:24px;font-size:13px;color:#666;">XML job scraping automation by <a href="https://yubhub.co">YubHub</a></p>]]></Description>
      <Jobtype>full-time</Jobtype>
      <Experiencelevel>senior</Experiencelevel>
      <Workarrangement>onsite</Workarrangement>
      <Salaryrange></Salaryrange>
      <Skills>IT audit, information security, risk management, SOX compliance, ERP, cloud-based applications, SAP, Salesforce, IT General Controls, IT Application Controls, auditing, risk assessment, control testing, issue identification, remediation follow-up, auditing documentation, reporting, presentation, emerging technology risks, regulatory expectations, industry best practices, CISA, CIA, CISSP, auditing software, risk management software</Skills>
      <Category>Finance</Category>
      <Industry>Technology</Industry>
      <Employername>Synopsys</Employername>
      <Employerlogo>https://logos.yubhub.co/careers.synopsys.com.png</Employerlogo>
      <Employerdescription>Synopsys is a technology company that develops and maintains software used in chip design, verification, and manufacturing.</Employerdescription>
      <Employerwebsite>https://careers.synopsys.com</Employerwebsite>
      <Compensationcurrency></Compensationcurrency>
      <Compensationmin></Compensationmin>
      <Compensationmax></Compensationmax>
      <Applyto>https://careers.synopsys.com/job/bengaluru/it-auditor-sr-associate-staff/44408/92463617200</Applyto>
      <Location>Bengaluru</Location>
      <Country></Country>
      <Postedate>2026-03-08</Postedate>
    </job>
  </jobs>
</source>