{"id":3675457,"url":"https://alion.io/job/rio-tinto-sox-compliance-manager","title":"SOX Compliance Manager","company":{"id":183,"name":"Rio Tinto","domain":"riotinto.com","url":"https://alion.io/company/rio-tinto","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":100,"open_postings":5,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":17,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Management","role_family":"Management","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Gurgaon, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[],"status":"live","first_seen_at":"2026-11-03T10:48:09Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-04T20:35:47Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"SOX Compliance Manager\n| India | Controls & Assurance\nPurpose of the Role\nThe SOX Compliance Manager is responsible for managing the effective execution and day-to-day delivery of Rio Tinto’s global Sarbanes-Oxley (SOX) compliance programme, ensuring activities are completed on time, to the required quality standards and in line with the agreed SOX methodology.\nThe role reports directly to the SOX Director and will have internal and external SOX testing teams to manage alongside working closely with SOX Compliance Managers, control owners, Finance, technology teams, and external auditors to coordinate risk assessments, control testing, evidence collection, deficiency evaluation, and remediation activities.\nThe role oversees the different phases of the SOX testing lifecycle, including design, interim, update, year-end, and remediation testing, ensuring appropriate planning, resource allocation, quality review, and timely resolution of issues.\nThe SOX Compliance Manager is responsible for monitoring programme progress, maintaining consistent and reliable SOX documentation, addressing operational challenges, and escalating significant risks or matters requiring management attention.\nThe role also supports the implementation of programme improvements, standardised processes, and automation initiatives to improve the efficiency, quality, and effectiveness of SOX delivery across Rio Tinto.\nKey Accountabilities\n1. Leadership and Team Management\nLead, coach and support internal SOX testing teams and external service providers to ensure high-quality and timely delivery.\nManage day-to-day team activities, workload, priorities, and resource allocation across the SOX testing lifecycle.\nSet clear expectations for testing quality, documentation, accountability, and timely completion of assigned activities.\nReview team performance, provide regular feedback and support technical development and continuous learning.\nPromote collaboration, teamwork, and consistent ways of working across internal teams, Protiviti and Regional SOX Compliance Managers.\nChampion Rio Tinto's values, employee wellbeing, and expected standards of conduct.\n2. SOX Programme Planning and Delivery\nManage the day-to-day execution of the global SOX programme in line with the approved scope, methodology and annual plan.\nLead planning and delivery across design, interim, update, year-end, and remediation testing phases.\nDevelop and maintain testing schedules, milestones, resource plans, and deliverables, ensuring activities are completed on time and to the required quality.\nCoordinate closely with Regional SOX Compliance Managers, internal testing teams, and external service providers to ensure consistent delivery.\nMonitor testing progress, identify delays or dependencies and take timely action to resolve operational challenges.\nProvide regular programme status updates, highlighting key achievements, outstanding activities, risks, and matters requiring escalation.\nSupport the implementation of programme changes and priorities established by the SOX Director.\n3. Risk Assessment, Scoping and Control Documentation\n· Prepare the annual SOX scoping and risk assessment by coordinating required information, analysis, and documentation.\n· Review control coverage and identify potential gaps, duplication or controls that may not adequately address the relevant risks of material misstatement.\n· Provide recommendations for control rationalisation, standardisation and improvements based on testing outcomes and practical experience.\n· Ensure Risk and Control Matrices, control descriptions, process documentation, and ownership details are accurate and maintained in the GRC platform.\n· Coordinate updates to SOX documentation arising from changes in business processes, systems, control design, or testing requirements.\n·Escalate significant scoping, risk assessment, or control design matters to the SOX Director for review and decision.\n4. Control Testing and Quality Assurance\nOversee the execution of walkthroughs, design effectiveness, and operating effectiveness testing across the agreed SOX scope.\nReview testing workpapers, supporting evidence and conclusions to ensure compliance with the SOX methodology and quality expectations.\nEnsure appropriate testing coverage, sample selection, documentation, and timely completion across all testing phases.\nCoordinate with KPMG and internal testing teams to align sample requirements, minimise duplicate requests and reduce the workload on control owners.\nEnsure testing evidence is complete, dependable, and appropriately retained within the GRC platform.\nIdentify and resolve testing issues, evidence gaps, and quality concerns, escalating significant matters where required.\nManage testing review comments and ensure timely resolution before completion of each testing phase.\n5. Certifications, Deficiencies and Remediation\nCoordinate periodic control design certifications and follow up with control owners to ensure timely completion.\nReview certification responses and identify changes or issues that may require further assessment or testing.\nManage the tracking and assessment of control deficiencies, including supporting root-cause analysis, impact assessments, and proposed remediation.\nWork with control owners and Regional SOX Compliance Managers to agree practical remediation plans, responsibilities, and target dates.\nMonitor remediation progress and follow up on overdue actions to minimise unresolved deficiencies at year-end.\nCoordinate remediation testing and review supporting evidence before recommending closure.\nEscalate significant, recurring or potentially material deficiencies to the SOX Director with clear supporting analysis and recommendations.\n6. External Audit and Stakeholder Coordination\nFunction as the primary operational contact for KPMG on SOX testing, sample selection, evidence requests, findings, and outstanding actions.\nCoordinate external audit requirements with Finance, Technology, business units, control owners, Regional SOX Compliance Managers, and service providers.\nManage the preparation and tracking of PBC requests, ensuring timely responses and appropriate supporting documentation.\nSupport KPMG's assessment of management testing team competence, objectivity, and testing quality, including preparation of required documentation.\nIdentify opportunities to align management and external audit testing to reduce duplication and improve efficiency.\nResolve day-to-day audit queries and escalate significant disagreements, technical matters, or delivery risks to the SOX Director.\nMaintain effective working relationships with stakeholders and ensure clear communication of SOX requirements, timelines, and responsibilities.\n7. Process Improvement and Technology\nIdentify and implement opportunities to improve testing efficiency, documentation quality, and consistency across the SOX programme.\nSupport control standardisation, rationalisation, and automation initiatives in line with the SOX improvement strategy.\nWork with Technology and control owners to address operational control gaps and improve the reliability of evidence and reporting.\nSupport enhancements to GRC workflows, dashboards, testing templates, issue tracking, and reporting.\nIdentify opportunities to use data analytics, automated testing, and Continuous Control Monitoring to improve assurance activities.\nShare lessons learned from testing, audit findings, and remediation to support ongoing programme improvements.\n8. Training and SOX Awareness\nCoordinate and deliver periodic SOX training and communications to control owners, operators, and relevant stakeholders.\nEnsure control owners understand SOX requirements, control responsibilities, evidence expectations, and certification processes.\nProvide guidance and training on the use of the GRC platform, including control documentation, evidence submission, and certifications.\nSupport Regional SOX Compliance Managers in addressing common control issues and improving the consistency of SOX practices.\nIdentify training needs arising from testing findings, control deficiencies, and changes to the SOX methodology.\n9. Reporting and Documentation\nMaintain accurate and up-to-date programme trackers, testing results, deficiency records, and remediation status within the GRC platform.\nPrepare regular SOX delivery reports, dashboards and status updates for the SOX Director and relevant stakeholders.\nEnsure reporting clearly identifies progress against milestones, outstanding activities, testing outcomes, and key delivery risks.\nPrepare supporting analysis, documentation and materials for management reviews, external auditor discussions, and governance reporting.\nEnsure SOX records and testing documentation are complete, consistent, and readily available for management and external audit review.\n10. Resource and Delivery Management\nLead and manage the internal SOX testing team, including allocation of responsibilities, workload management, performance oversight, coaching, and development, while overseeing and managing external service providers to ensure effective coordination, quality, and timely delivery of SOX testing activities.\nMonitor delivery against agreed plans, timelines, and resource requirements, identifying capacity constraints early.\nCoordinate work allocation across testing teams to balance workloads and meet programme priorities.\nMonitor external provider deliverables, quality, and performance against agreed expectations.\nIdentify opportunities to improve resource efficiency and reduce unnecessary effort or costs.\nProvide resource and delivery updates to the SOX Director, including recommendations to address capacity or performance challenges.\nExperience, Skills and Qualifications\nBachelor's or master's degree in accounting, finance, business administration, or a related discipline.\nCA, CPA, or an equivalent professional qualification is preferred; CISA or other relevant qualifications are desirable.\n10+ years of recent and relevant experience in PCAOB and SOX external audits, ideally at Manager level or above within a Big Four firm or an equivalent role.\nStrong practical knowledge of PCAOB auditing standards, SOX requirements, and internal controls over financial reporting, including risk assessments, control design, testing, deficiency evaluation, and remediation.\nDemonstrated experience managing SOX testing activities, including walkthroughs, design and operating effectiveness testing, evidence review, documentation, and quality assurance.\nExperience collaborating directly with external auditors on risk assessments, testing approaches, sample selection, audit evidence, control deficiencies, and remediation.\nStrong understanding of financial reporting processes, business-process controls, IT general controls and the dependencies between business and technology controls.\nExperience coordinating SOX activities across multiple business units, functions, or locations, preferably within a large or multinational organisation.\nPractical experience in assessing control deficiencies, supporting root-cause analysis, developing remediation plans and monitoring actions through to closure.\nExperience providing independent Second Line of Defence (2LoD) oversight and constructive challenge to control owners and business stakeholders.\nWorking knowledge of GRC platforms, ERP systems and SOX documentation and testing tools; experience with data analytics and automated testing is desirable.\nExperience supporting control standardisation, process improvements, automation, and other initiatives to improve SOX delivery efficiency.\nStrong stakeholder management and communication skills, with the ability to coordinate effectively with Finance, Technology, control owners, external auditors, and service providers.\nDemonstrated experience managing, coaching, and reviewing the work of internal or external testing teams, including planning, resource allocation, and performance monitoring.\nStrong analyti...","description_format":"text","description_chars":15741,"description_truncated":true,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Mining","Iron Ore","Non-ferrous Metals"],"lifecycle":[{"event":"open","at":"2026-11-03T10:48:09Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":17,"reasons":["conf:2","velocity","win:early","comp:brand"],"computed_at":"2026-11-04T06:34:25Z"},"pay":null,"html_url":"https://alion.io/job/rio-tinto-sox-compliance-manager","json_url":"https://alion.io/job/rio-tinto-sox-compliance-manager.json","meta":{"generated_at":"2026-11-04T22:15:17Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":494,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":183},"rest":"https://alion.io/mcp/rest/get_company?id=183"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frio-tinto-sox-compliance-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frio-tinto-sox-compliance-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frio-tinto-sox-compliance-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/rio-tinto-sox-compliance-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frio-tinto-sox-compliance-manager"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3675457}},{"tool":"search_jobs","arguments":{"company":"riotinto.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3675457},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}