Financial Risk Management SOX Assurance Senior - IT

About the role and team 

The Financial Risk Management SOX Assurance team plays a critical role in safeguarding Uber's financial integrity and ensuring compliance with the Sarbanes-Oxley Act. As a member of this team, you will be at the forefront of protecting the company's financial data and maintaining the trust of our stakeholders. You will work to assess, evaluate, and improve internal controls related to financial reporting, in alignment with Uber's commitment to doing the right thing and upholding the highest standards. This team plays a critical role in upholding FRM’s core values—placing the right people in the right roles to ask the right questions, acting with integrity, and boldly approaching risk management to drive meaningful outcomes. This team is essential in upholding Uber's core values of putting people first, acting with integrity, and being bold in our approach to risk management.

Specifically, the FRM Assurance team is responsible for monitoring the effectiveness of the design, implementation and operating effectiveness of internal controls to mitigate financial reporting risks in accordance with the 2013 COS Framework to satisfy SOX requirements.  

What you’ll do 

• Risk Assessment: Execute the identification and assessment of financial reporting risks for the relevant areas, and ensure appropriate controls are in place to mitigate those risks.
• Control Evaluation: Evaluation of the design and operating effectiveness of internal controls over financial reporting (ICFR) for IT controls, including collaboration with BP control specialists. 
• Stakeholder Management: Build and maintain strong relationships with key stakeholders, including internal and external auditors, and control owners across Engineering, Product, and Finance.
• Deficiency Remediation: Evaluate control deficiencies, including assessing potential financial reporting impacts, identifying root causes, and supporting remediation efforts.
• Continuous Improvement: Drive continuous improvement initiatives to enhance the efficiency and effectiveness of the IT SOX program, including the use of technology and automation. Champion process automation and controls modernization through tooling, data analytics, and risk intelligence. Partner with FRM's Compliance Engineering team to design and implement scalable, technology-enabled solutions (including AI) that enhance control monitoring, reduce manual effort, and improve audit readiness.
• Regulatory Compliance: Stay abreast of changes in SOX and other related regulations and best practices, and ensure the company's compliance program is updated accordingly. This includes monitoring changes to PCAOB auditing standards and SEC guidance.
• Reporting: Prepare and present regular reports to key stakeholders and FRM leadership on the status of SOX compliance, key risks, and control effectiveness for related areas.
• Audit Tools and Techniques: Oversee the utilization of audit software and tools to enhance the efficiency and effectiveness of SOX testing and monitoring.
• Prior experience auditing or operating within platform-based technology companies, particularly those with distributed systems architectures such as microservices, containerized environments (e.g., Docker, Kubernetes), cloud-native platforms, and API-driven services.
• Familiarity with modern DevOps and CI/CD pipelines and automated provisioning and monitoring tools.
• Experience evaluating IT and business process controls across significant financial reporting cycles, including the assessment of control design, system dependencies, and associated financial reporting risks.

Additional Skills

• Communication and Interpersonal Skills: Ability to communicate effectively with diverse stakeholders, including senior management, auditors, and team members. This includes strong written and verbal communication, active listening, and the ability to present complex information clearly and concisely.
• Analytical and Problem-Solving Skills: Strong analytical skills to identify and assess complex issues, evaluate risks, and develop effective solutions. This includes critical thinking, attention to detail, and the ability to make sound judgments under pressure.
• Adaptability and Change Management: Ability to adapt to changing regulatory requirements, business environments, and organizational priorities. This includes flexibility, resilience, and the ability to drive change effectively.
• Business Acumen: Understanding of Uber's business operations, financial performance, and strategic objectives, and the ability to align SOX activities with these goals.
• Ethical Judgment and Integrity: Strong ethical judgment and integrity, with a commitment to upholding the highest standards of professional conduct and compliance.

Basic Qualifications 

• Bachelor's degree in Information Systems, Computer Science, Accounting or a related field.
• 4+ years of relevant experience in SOX, internal audit, or public accounting

Preferred Qualifications 

• CISA, CISSP , CPA or other relevant professional certification is highly preferred.
• Big 4 experience is a plus.

For San Francisco, CA-based roles: The base salary range for this role is USD $133,000 per year - USD $148,000 per year.

You will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits.