SOX Control Tester - ITGC
About the job
- Expertise in advanced Excel, including complex formulas, pivot tables, macros, and data analysis tools for handling large datasets.
- Expertise in automation scripting with Python, PowerShell, or JavaScript to develop and execute automated testing scripts.
- Deep knowledge of Sarbanes-Oxley compliance requirements and information technology general controls frameworks.
- Experience designing, executing, and documenting control testing procedures.
- Ability to detect potential control deficiencies and recommend effective remediation strategies.
- Experience with Saviynt and SailPoint for identity governance and administration, compliance, and user access management.
- Familiarity with Oracle and SAP for testing controls related to financial reporting and IT operations.
- Understanding of Azure cloud services for testing and managing information technology environments.
- Experience using JIRA for project management and GitHub for version control when managing code and scripts.
- Proficiency using ticketing systems to track issues and resolutions.
- Design, execute, and document SOX and ITGC control testing procedures.
- Develop and execute automated testing scripts.
- Perform expanded sample testing.
- Test controls related to financial reporting, IT operations, identity governance, administration, and user access management.
- Track issues and resolutions using ticketing systems.
- Identify potential control deficiencies and recommend effective remediation strategies.
About the company
WaveStrong provides information security and data privacy services to organizations across the US and Canada, combining advisory, managed security services, and solution consulting to plan, implement, and run security programs. Its advisory work includes risk assessments and compliance planning (PCI DSS, HIPAA, SOX, NIST), while its managed services offer 24/7 monitoring, co-managed SIEM, endpoint security, and MDR as an extension of a client’s team. Solution consultants bring engineers to help with deployment and integration of security projects across on-premises and cloud environments, covering application, cloud, data protection, and threat detection. The company differentiates itself with an end-to-end approach that unites strategic planning, ongoing operations, and hands-on engineering, focused on unified GRC across diverse industries, with the goal of protecting confidential information, intellectual property, and customer data.
Company Size
11-50
Company Stage
N/A
Total Funding
N/A
Headquarters
null
Founded
2001
Get referred to WaveStrong
See people who can refer or advise you
Simplify's Take
What believers are saying
- WaveStrong hosted IBM-backed PA Security Leaders Round Table in 2026, reinforcing market visibility.
- WaveStrong blog and events pages stayed active through 2026, showing ongoing demand generation.
- Whiteswan partnership in April 2025 expands identity security offerings for enterprise buyers.
What critics are saying
- Khanna v. Walia names WaveStrong in a 2026 Northern California RICO case.
- Court dockets indicate WaveStrong faces counterclaims and cross-claims, distracting leadership through 2026.
- Service-heavy cybersecurity consulting faces margin pressure from larger IBM ecosystem competitors and specialist MSSPs.
What makes WaveStrong unique
- WaveStrong pairs consulting, managed security, and solution engineering for enterprise security operations.
- IBM partnership signals distribution leverage and credibility in complex cybersecurity deals.
- Identity security partnerships like Whiteswan broaden its portfolio beyond traditional advisory services.
Help us improve and share your feedback! Did you find this helpful?