Note: The job is a remote job and is open to candidates in USA. Sira Consulting is an Inc 5000 company seeking a GRC SOX Project Manager who will integrate SOX risk management, GRC governance, and cybersecurity controls with AI-driven solutions. The role requires expertise in SOX controls and compliance processes, focusing on designing AI use cases that enhance control effectiveness and audit readiness.
Responsibilities
- Provide subject matter expertise on SOX Information Technology controls, GRC frameworks, and compliance governance
- Identify and define SOX scope, including in scope processes, systems, applications, risks, and controls
- Review and assess SOX control design and operating effectiveness across IT and cybersecurity domains
- Identify control gaps, SOX deficiencies, and emerging risks within the existing control environment
- Support audit cycles by ensuring alignment between SOX requirements, control execution, and evidence expectations
- Identify, evaluate, and define AI and advanced analytics use cases applicable to the current SOX and GRC ecosystem, including: Continuous control monitoring, Automated evidence validation and quality checks, SOX deficiency trend analysis and prediction, Audit readiness and query response optimization, Control execution anomaly detection, Risk scoring and prioritization
- Assess feasibility, risk, and compliance impact of AI use cases within SOX boundaries
- Ensure AI solutions enhance SOX compliance without introducing regulatory, audit, or data integrity risks
- Map cybersecurity controls (e.g., identity & access, logging, change management, vulnerability management) to SOX requirements
- Identify opportunities where AI can strengthen cybersecurity related SOX controls
- Ensure cybersecurity risks impacting financial reporting are appropriately captured and monitored within the SOX framework
- Advise on secure AI adoption, ensuring controls around model access, data integrity, auditability, and governance
- Design high level AI architectures aligned with GRC, SOX, and cybersecurity requirements
- Define AI control points, governance requirements, and audit trail expectations
- Partner with engineering and data teams to ensure AI solutions are: Explainable and auditable, Secure and compliant, Aligned with SOX documentation and evidence needs
- Ensure AI solutions integrate seamlessly with existing GRC tools, SOX workflows, and audit processes
- Ensure AI enabled processes support design effectiveness and operating effectiveness assessments
- Validate AI generated outputs and insights used for SOX decision making or evidence
- Define standards for AI assisted SOX evidence, including traceability, reproducibility, and audit defensibility
- Act as a second line oversight role ensuring AI solutions meet compliance, risk, and audit expectations
- Act as a trusted advisor to Risk, Compliance, Audit, Cybersecurity, and IT leadership
- Support internal and external audit discussions related to AI adoption in SOX processes
- Provide guidance on AI risk management, model governance, and regulatory considerations
- Translate complex AI concepts into business and audit friendly language
- Define and monitor SOX and GRC KPIs, improved through AI capabilities, including: Control execution timeliness, Evidence quality and completeness, Audit response SLAs, Deficiency recurrence rates
- Ensure AI enabled monitoring supports strict adherence to SOX compliance metrics
Skills
- Bachelor's or Master's degree in Information Systems, Computer Science, Cybersecurity, Accounting, Risk Management, or related field
- 10–15+ years of experience across SOX, GRC, cybersecurity, or audit
- Experience working with or architecting AI enabled risk or compliance solutions
- Extensive, hands on knowledge of SOX Information Technology controls
- Strong experience in SOX scoping, design effectiveness, operating effectiveness, and deficiency management
- Deep understanding of audit lifecycle, evidence requirements, and compliance governance
- Experience identifying and designing AI / analytics use cases in risk, compliance, or control environments
- Knowledge of AI governance, explainability, and risk management
- Ability to architect AI solutions that are audit ready and SOX compliant
- Strong understanding of data, controls, and system integrations in regulated environments
- Solid understanding of cybersecurity controls impacting SOX
- Ability to align AI, cybersecurity, and compliance objectives without increasing risk exposure
- Strong communication and influencing skills across technical and non technical stakeholders
- Ability to challenge constructively and guide teams through compliant innovation
- Strategic mindset with attention to regulatory and audit expectations
- Certifications in relevant areas are good to have, including: CISA, CRISC, CISSP, CPA / CIA
- Cloud or AI related certifications (preferred)
Company Overview
Company H1B Sponsorship