Financial Risk Management – SOX Advisory Senior - IT

About the Role

At Uber, we're not just moving people and things; we're building a global business grounded in integrity. Our Financial Risk Management (FRM) Advisory team is the backbone of that integrity, ensuring our financial reporting is accurate, trustworthy, and compliant with the Sarbanes-Oxley Act (SOX).

As a Senior on the Advisory team, you'll be on the front lines, safeguarding our financial data and helping us navigate the complexities of a dynamic, global company. This isn't just about checking boxes—it's about asking the right questions, acting with conviction, and boldly improving our processes to drive meaningful outcomes and maintain the trust of our stakeholders.

Job Responsibilities

• Strategic Risk Advisory & Governance: Serve as the lead advisor to IT owners in the orchestration and maintenance of a robust internal control environment. This includes championing the integration of risk management principles—including Sarbanes-Oxley (SOX) compliance—throughout the end-to-end project lifecycle to ensure risk mitigation is embedded into business and IT operations by design.
• Control Evaluation and Monitoring: Conduct end to end evaluations of internal controls over financial reporting (ICFR) for IT controls, including collaboration with BP control specialists. This responsibility entails executing risk diagnostics, assessing the design and operational effectiveness of controls, mapping key financial statement assertions to control activities, and monitoring the effectiveness of controls.
• Stakeholder Management: Build and maintain strong relationships with key stakeholders, including internal and external auditors, and control owners across Engineering, Product, and Finance.
• Deficiency Management and Remediation: Assist in the process for identifying and evaluating control deficiencies. Investigate root causes, partner with business units to ensure corrective action plans are appropriate, and monitor remediation efforts through to successful completion.
• Learning and Development: Serve as a subject matter expert in promoting risk awareness across designated business areas. This can be done by facilitating high-level training sessions that translate complex FRM concepts into actionable knowledge, ensuring process owners understand the strategic importance of risk identification and the value of a robust control environment.
• Continuous Improvement: Drive continuous improvement initiatives to enhance the efficiency and effectiveness of the IT SOX program, including the use of AI and automation. Champion process automation and controls modernization through tooling, data analytics, and risk intelligence. Partner with FRM's Compliance Engineering team to design and implement scalable, technology-enabled solutions (including AI) that enhance control monitoring, reduce manual effort, and improve audit readiness.
• Regulatory Compliance: Stay abreast of changes in SOX and other related regulations and best practices, and ensure the company's compliance program is updated accordingly. This includes monitoring changes to PCAOB auditing standards and SEC guidance.
• Reporting and Analysis: Assist in the preparation of clear and concise reports for Financial Risk Management (FRM) leadership and key stakeholders. These communications will articulate the purpose and status of risks related to key initiatives, such as, but not limited to, SOX compliance. This reporting will provide actionable insights that strengthen the organization's risk posture and operational resilience.

Basic Qualifications

• Platform Technology: Experience in auditing or operating within platform-based technology companies, particularly those with distributed systems architectures such as microservices, containerized environments (e.g., Docker, Kubernetes), cloud-native platforms, and API-driven services.
  • Familiarity with modern DevOps and CI/CD pipelines and automated provisioning and monitoring tools.
• ASC 606: Experience with IT and business process controls related to revenue recognition under ASC 606, including system design and reporting implications.
• Bachelor's degree in Information Systems, Computer Science, Accounting or a related field.
• 4+ years of relevant experience in SOX, internal audit, or public accounting (Big 4 experience is a plus).
• CISA, CISSP, CPA or other relevant professional certification is highly preferred.

Preferred Qualifications

To be successful in this role, the ideal candidate should possess the following additional skills:

• Communication and Interpersonal Skills: Ability to communicate effectively with diverse stakeholders, including senior management, auditors, and team members. This includes strong written and verbal communication, active listening, and the ability to present complex information clearly and concisely.
• Analytical and Problem-Solving Skills: Strong analytical skills to identify and assess complex issues, evaluate risks, and develop effective solutions. This includes critical thinking, attention to detail, and the ability to make sound judgments under pressure.
• Adaptability and Change Management: Ability to adapt to changing regulatory requirements, business environments, and organizational priorities. This includes flexibility, resilience, and the ability to drive change effectively.
• Business Acumen: Understanding of Uber's business operations, financial performance, and strategic objectives, and the ability to align SOX activities with these goals.
• Ethical Judgment and Integrity: Strong ethical judgment and integrity, with a commitment to upholding the highest standards of professional conduct and compliance.

For San Francisco, CA-based roles: The base salary range for this role is USD $133,000 per year - USD $148,000 per year.

You will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits.