The role:

The Sarbanes-Oxley (SOX) Program Management Office (PMO) at SoFi, is part of the Controllership and is responsible for ensuring the company has the necessary internal control and assessment elements in place to meet the SOX requirements. The PMO facilitates risk assessment and scoping to determine project scope of each reporting year, and prepares the internal control assessment plan and accompanying timelines, scheduling and process walkthroughs. From the walkthroughs, we oversee/execute the updating of control descriptions and process flowcharts. Our team reviews current and prior-year control deficiencies in order to determine the remediation status. Associated with deficiencies, we prepare control deficiency reports and monitor/follow-up on remediation efforts. We meet with external auditors as necessary to provide status updates and remediation efforts of ongoing work. The SOX PMO manages the SOC1 audits and associated reporting executed by our service auditors. Additionally, the SOX PMO team partners with the business to provide internal control over financial reporting associated with emerging areas/products, mergers and acquisitions and conducts SOX Readiness assessments, inclusive of creating the Risk and Control matrices and flowcharts.

The Senior Analyst, IT SOX PMO responsibilities include, but are not limited to, supporting the Technology and Engineering, Product & Development (IT/EPD) related components of SoFi’s Corporate SOX Program, and assisting the Senior Manager, IT SOX PMO as an advisor to the lines of business across SoFi Technologies and its subsidiaries.  SoFi’s fast pace of growth provides career development (e.g., work directly with senior and executive management) and learning opportunities (e.g., new system implementations) considering the role’s enterprise-wide exposure.

The Senior Analyst, IT SOX PMO will report to the Senior Manager, IT SOX PMO , and will work with a mix of direct, indirect, and external team members to manage and execute the program. The Senior Analyst, IT SOX PMO will work closely with lines of IT and EPD SOX Liaisons to ensure that Internal Controls Over Financial Reporting (ICFR) for SoFi Technologies and its subsidiaries, are appropriately designed and are operating effectively, SOX compliant control documentation is maintained and any deficiencies identified are assessed for severity, remediated, and reported to the SOX Steering Committee. In addition, the Senior Analyst, IT SOX PMO will be involved in special projects including implementations related to new systems and new accounting standards while assessing the impact on the company’s ICFR.  The Senior Analyst, IT SOX PMO, will also assist with the execution of the company’s system and organization control (SOC) reporting program objectives. 

What you’ll do: 

• Work closely with the Senior Manager, IT SOX PMO, and the Business Process (BP) SOX PMO team in completing the annual SOX scoping and risk assessment (with a quarterly refresh), as well as support the annual Fraud Risk Assessment project, to ensure compliance with COSO standards and appropriate scoping and coverage of the SOX Program.
• Assist with the SOX 404 and 302 Certification process for IT/EPD areas
• Coordinate with the lines of business teams, as related to SOX IT/EPD activities, including working closely with the SOX Testing team to facilitate controls walkthroughs and testing, and lead deficiency evaluations/reporting and monitor remediation activities.
• Identify opportunities to improve the SOX program to become more efficient and effective through optimization and automation.
• Monitor IT SOX testing with the identification and documentation of IT SOX Controls in coordination with the SOX PMO BP team. 
• Assist the business in enhancing documentation, inclusive of the Risk and Control Matrix and accompanying process flowcharts.
• Supports evaluation of ICFR deficiencies and monitors IT/EPD remediation activities in order to conclude on the effectiveness of GITC controls.
• Work directly with SoFi’s external auditors to ensure the SOX Program meets their requirements in terms of scope, timing and approach; be a key contact for the external auditors related to IT/EPD SOX matters.
• Partner with different members of the SOX PMO team in the execution of special projects impacting the SOX program, including but not limited to new systems implementations. 
• Work closely with SoFi’s Supplier Risk Management group, and SOX Liaisons to execute the company’s SOC 1 Report Assessments across the lines of business.
• Work closely with the SOC 1 auditors to oversee SoFi’s SOC 1 audit and reporting program.
• Partner with the SOX Testing team to ensure the overall IT/EPD workpapers meet the quality, consistency, risk management and adherence to the Corporate SOX Policy.
• Advise the team as a Subject Matter Expert on IT/EPD SOX controls (e.g., ITGCs, ITACs, SOC1), COSO compliance, ICFR best practices, and the continuous enhancement of PMO’s workflow processes with the expanding rollout of additional SOX system’s automation functionalities.
• Build internal reputation as a management consultant and internal controls expert by building and maintaining ongoing relationships with the various lines of business included in the company’s SOX process.
• Responsibilities also include the following: 1) adhering to and complying with all applicable, federal and state laws, regulations and guidance 2) adhering to company policies and procedures, 3) completing required training.

What you’ll need:

Education: Bachelor’s Degree - Accounting, Information Systems Management, Finance 

• 5 or more years of IT SOX related experience (with 2 or more years in a supervisory role). Should have in-depth knowledge focused on IT SOX, ITGCs, IT application controls (ITACs), ICFR, COSO Framework, and baseline understanding of business risks and controls.
• CPA or CIA/CISA, or equivalent required
• Practical and deep knowledge of US GAAP, SOX and COSO

• Driven by Excellence - you are driven by our mission and our passion for customer success which means you relentlessly pursue excellence, that you do not tolerate mediocrity and you work intensely to achieve your goals
• High Integrity - you seek open and honest communication, and you hold yourself to very high moral and ethical standards, especially in handling confidential information.
• You reject manipulation, dishonesty and intolerance
• Critical thinking, analytical and strategic skills
• Ability to independently navigate within an ambiguous environment
• Organized, detailed, proactive, self-motivated, collaborative
• Proven ability to work cross functionally and adapt to change are extremely important
• Ability to prioritize workloads and ensure deadlines are consistently met
• Strong project management skills and organizing ability with successful experience in independently managing multiple projects concurrently at varying levels of technical difficulty 
• Strong teamwork and communication skills (both oral and written)

Nice to have:

• Big 4 / Public Accounting Firm experience is strongly preferred.
• Prefer FinTech, banking and/or financial services experience primarily focused on SOX or IT enterprise-wide risk management and ICFR controls consulting.