Job Description
Interim IT SOX Consultant (Hands-On) £600-£800 per day (Outside IR35) 6 Months+ (likely extension) Hybrid - Midlands
We are supporting a major international organisation in the industrial sector undertaking a large-scale transformation programme to implement a US Sarbanes-Oxley (SOX) compliant internal controls framework.
We are seeking an experienced IT SOX Contractor to support the delivery of the IT controls workstream, working hands-on across the design, documentation and implementation of IT General Controls (ITGC) and IT Application Controls (ITAC).
This role will suit a delivery-focused specialist who is comfortable operating within a structured SOX programme and working closely with IT, Finance and Audit teams to embed compliant, auditable controls across a complex systems landscape.
Key Responsibilities
- Support the delivery of the IT SOX workstream, working hands-on across multiple systems and processes
- Assist in the design and implementation of IT General Controls (ITGC) and IT Application Controls (ITAC)
- Develop and maintain IT control documentation, including:
- System narratives
- Risk and Control Matrices (RACMs)
- Process flows and supporting evidence
- Perform IT control walkthroughs with control owners and document key processes and risks
- Support SOX scoping activities, including identification of in-scope systems and interfaces
- Assist in identifying and documenting control gaps and deficiencies
- Work with IT teams to support remediation activities, ensuring controls are appropriately designed and evidenced
- Prepare documentation and evidence to support controls testing and audit requirements
- Liaise with internal audit and external auditors, responding to queries and providing supporting materials
- Ensure consistency and quality across all IT SOX documentation and deliverables
Candidate Profile
- Proven experience working in a hands-on IT SOX, IT audit or IT controls role
- Strong understanding of IT General Controls (ITGC), including:
- Access management
- Change management
- IT operations
- Exposure to IT Application Controls (ITAC) and automated controls
- Experience producing high-quality SOX documentation (RACMs, narratives, walkthroughs)
- Background in IT audit, technology risk, or SOX delivery (Big 4 or equivalent desirable)
- Experience working with ERP systems (e.g. SAP, Oracle, Dynamics or similar)
- Comfortable working in a fast-paced programme environment with multiple stakeholders
- Strong attention to detail and ability to deliver audit-ready documentation
Desirable Experience / Certifications
- CISA (Certified Information Systems Auditor)
- Experience supporting SOX implementations or controls transformation programmes
- Familiarity with COBIT and/or ITIL frameworks
- Experience working with external auditors in a SOX environment
GRG Executive Search is committed to encouraging and celebrating applicants from different backgrounds, whatever their gender, ethnicity, race, religion, education, socioeconomic background, disability or sexual orientation to promote diversity and inclusion in the workplace.We receive a significant number of applications to our adverts. Whilst we always endeavour to respond to each application, this is not always possible. If you have not received a response from us within 10 working days, please consider your application unsuccessful on this occasion.By applying you will be registered as a candidate with Gleeson Recruitment Limited. Our is available on our website and explains how we will use your data.
