Technology Internal Controls Supervisor

Technology Internal Controls Supervisor

This position is responsible for managing personnel and functions surrounding Southern Company’s technology-related Sarbanes-Oxley (SOX) controls, ensuring all control objectives are achieved to support management’s SOX 404 certification.

JOB REQUIREMENTS

• Bachelor’s degree in Computer Science / Information Security, Information Systems, Accounting or related field required
• Certified Information Systems Auditor (CISA), Certified Risk and Information Security Controls (CRISC) certifications or related industry certifications preferred.
• Minimum of six years’ experience in financial applications support, technology risk, or compliance (financial controls, technology controls or audit) required.
• Strong working knowledge of SOX/internal control concepts and evidence standards as well as application security concepts.
• Ability to effectively apply technology knowledge to evaluate SOX control impact and risk associated with key financial applications (KFA), key financial tools (KFTs), and segregation of duties.
• Have general understanding accounting concepts and requirements to determine appropriate risk levels of applications and related tools to financial reporting.
• Leadership experience preferred, including performance management and employee development.
• Excellent interpersonal, analytical, and organizational skills.
• Superior communication skills, both verbal and written to engage, build credibility and maintain relationships with business partners.
• Ability to initiate and manage multiple complex projects.
• Demonstrate behaviors consistent with company culture - Safety First, Intentional Inclusion, Act with Integrity, Superior Performance.
• Familiarity with Oracle products and Workiva software a plus.

MAJOR JOB RESPONSIBILITIES:

• Provide leadership in the following areas to support the company’s SOX compliance:
  • Annual SOX risk assessment, scoping and planning for IT-related controls (automated controls, general computing controls, and logical access).
  • Evaluate the design and operating effectiveness of IT-related controls, including controls around key reports (information used in controls).
  • Evaluate and document IT SOX control deficiencies, including severity assessment, root cause analysis, exposure analysis, and remediation plans.
  • Quarterly/annual control certification for IT-related controls.
  • Assess new applications and tools and/or changes to existing applications and tools for SOX impact.
  • Provide internal controls leadership for application and tool implementations.
  • Facilitate the annual SSAE 18 (SOC report) assessments and segregation of duties (SOD) analysis.
• Build and maintain strong relationships with control owners and performers in IT and business departments, internal auditors, and external auditors to further enable common goals and efficiencies.
• Identify and implement innovative solutions to achieve process efficiencies around controls testing.
• Develop and coach direct reports.