Technology Internal Controls Supervisor
This position is responsible for managing personnel and functions surrounding Southern Company’s technology-related Sarbanes-Oxley (SOX) controls, ensuring all control objectives are achieved to support management’s SOX 404 certification.
JOB REQUIREMENTS
- Bachelor’s degree in Computer Science / Information Security, Information Systems, Accounting or related field required
- Certified Information Systems Auditor (CISA), Certified Risk and Information Security Controls (CRISC) certifications or related industry certifications preferred.
- Minimum of seven years’ experience in financial applications support, technology risk, or compliance (financial controls, technology controls or audit) required.
- Strong working knowledge of SOX/internal control concepts and evidence standards as well as application security concepts.
- Ability to effectively apply technology knowledge to evaluate SOX control impact and risk associated with key financial applications (KFA), key financial tools (KFTs), and segregation of duties.
- Have general understanding accounting concepts and requirements to determine appropriate risk levels of applications and related tools to financial reporting.
- Leadership experience preferred, including performance management and employee development.
- Excellent interpersonal, analytical, and organizational skills.
- Superior communication skills, both verbal and written to engage, build credibility and maintain relationships with business partners.
- Ability to initiate and manage multiple complex projects.
- Demonstrate behaviors consistent with company culture – Safety First, Intentional Inclusion, Act with Integrity, Superior Performance.
- Familiarity with Oracle products and Workiva software a plus.
MAJOR JOB RESPONSIBILITIES:
- Annual SOX risk assessment, scoping and planning for IT-related controls (automated controls, general computing controls, and logical access).
- Evaluate the design and operating effectiveness of IT-related controls, including controls around key reports (information used in controls).
- Evaluate and document IT SOX control deficiencies, including severity assessment, root cause analysis, exposure analysis, and remediation plans.
- Quarterly/annual control certification for IT-related controls.
- Assess new applications and tools and/or changes to existing applications and tools for SOX impact.
- Provide internal controls leadership for application and tool implementations.
- Facilitate the annual SSAE 18 (SOC report) assessments and segregation of duties (SOD) analysis.
- Build and maintain strong relationships with control owners and performers in IT and business departments, internal auditors, and external auditors to further enable common goals and efficiencies.