"Alerted.org

Job Description

In this role, you will work collaboratively with the Cybersecurity GRC team along with stakeholders across the business to assess, review, verify, and audit technology controls related to SOX Compliance. The SOX Compliance Specialist will be responsible for coordinating the collection of evidence, walkthrough meetings, remediation, and ensuring that teams are educated on what is required of them. Following are key areas of responsibility for this role:

Responsible for assisting with the delivery of the IT SOX program and ensuring the effectiveness of lululemons technology internal control environment.

Responsible for documenting the SOX control design narratives and SOX control operating effectiveness testing for in-scope systems and tools.

Works collaboratively with stakeholders across technology and system stakeholders to ensure effective technology controls are in place to meet SOX requirements.

Serves as a subject matter expert (SME) for SOX IT compliance across the organization.

Proactively communicates changes in regulatory or audit requirements to teams and helps drive the implementation of new or updated controls.

Partners with Global Architecture and Technology teams to understand current and future strategies that may impact SOX-relevant systems and processes.

Identifies, evaluates, documents, and monitors the remediation of control deficiencies, with an emphasis on assisting process and IT control owners in timely and effective remediation.

Assists with quarterly SOX control certifications and management attestations.

Automates and assists in gathering audit evidence for internal and external SOX audits.

Applies a risk-based approach to planning, executing, and reporting on SOX-related audit engagements.

Creates efficiencies for audit engagements by establishing and maintaining document request lists and centralized evidence repositories.

Provides metrics and reporting decks to demonstrate that the IT SOX program delivers expected outcomes and effectively supports business objectives.

We are a company committed to creating inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity employer that believes everyone matters. Qualified candidates will receive consideration for employment opportunities without regard to race, religion, sex, age, marital status, national origin, sexual orientation, citizenship status, disability, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to Human Resources Request Form (https://airtable.com/app21VjYyxLDIX0ez/shrOg4IQS1J6dRiMo) . The EEOC "Know Your Rights" Poster is available here (https://www.eeoc.gov/sites/default/files/2023-06/22-088\_EEOC\_KnowYourRights6.12ScreenRdr.pdf) .

To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/ .

Skills and Requirements

4+ years of experience in Security GRC, IT Audit, or a related field, with a strong focus on SOX compliance and IT General Controls (ITGCs) in a retail environment

Big 4 IT Audit experience or similar is required, with demonstrated expertise in evaluating and testing ITGCs and application controls supporting financial reporting

Deep understanding of SOX Section 404 requirements, including risk assessment, control design, and effectiveness testing

Experience working with internal and external auditors, including managing walkthroughs, evidence collection, and audit issue resolution

Strong knowledge of ITGC domains such as access controls, change management, IT operations, and system development lifecycle (SDLC)

Familiarity with retail-specific systems (ex. Oracle EBS, Retail Management Systems, Order Management Systems, Warehouse Management Systems) and how they intersect with SOX compliance

Experience with cloud platforms (e.g., AWS, Azure), SaaS applications, and their implications for SOX controls

Proficiency in using GRC tools like ServiceNow, to streamline audit workflows and evidence management

Proven ability to drive remediation efforts, track control deficiencies, and support control owners in implementing sustainable solutions

Strong communication and stakeholder management skills, with the ability to influence cross-functional teams and align on compliance priorities

Professional certifications such as CISA, CPA, or CIA are required Demonstrated ability to work in a fast-paced, global retail environment, managing multiple priorities and time zones null

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion,sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military oruniformed service member status, or any other status or characteristic protected by applicable laws, regulations, andordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [email protected].