IT Sox Controls Analyst

Location Details: Remote - United States

At GoDaddy the future of work looks different for each team. Some teams work in the office full-time, others have a hybrid arrangement (they work remotely some days and in the office some days) and some work entirely remotely.

This is a remote position, so you’ll be working remotely from your home. You may occasionally visit a GoDaddy office to meet with your team for events or meetings.

This position is not eligible to be performed in Alaska, Mississippi, North Dakota, or the Virgin Islands.

GoDaddy is not currently considering candidates for this role in California, Seattle, or NYC.

Join our team

Our IT SOX & Controls team resides within Corporate Technology, where we support all GoDaddy employee technology needs. We partner across Technology, Finance, and Internal Audit to ensure the integrity and reliability of systems supporting financial reporting. Our team is responsible for designing, maintaining, and strengthening IT General Controls that enable scalable growth while protecting the company from financial and operational risk. If you are passionate about risk management, process design, and working cross-functionally to improve control maturity, this role offers strong enterprise exposure and meaningful impact.

What you'll get to do...

• Support the execution and oversight of IT General Controls (ITGCs) across access management, change management, and computer operations
• Perform IT risk assessments and impact analysis for in-scope systems
• Create, document, and maintain control narratives, standard operating procedures (SOPs), and risk control matrices (RCMs)
• Facilitate and quality-assure quarterly user access reviews (UARs), including validation of reviewer evidence
• Review and evaluate change management samples to confirm proper approvals, testing, and segregation of duties
• Assess control design and operating effectiveness and identify potential gaps
• Evaluate control deficiencies, perform root cause analysis, and track remediation to closure
• Partner with IAM, Engineering, DevOps, Infrastructure, and Finance teams to strengthen control processes
• Support internal and external audit walkthroughs and evidence requests
• Drive standardization and continuous improvement of control processes to reduce audit friction and improve reliability

Your experience should include...

• 3+ years of experience supporting IT General Controls (ITGCs) in a SOX-regulated environment
• Strong understanding of access management, change management, and computer operations controls
• Experience supporting internal or external SOX audits, including walkthroughs and evidence preparation
• Experience drafting or maintaining control documentation (SOPs, narratives, RCMs)
• Understanding of IAM concepts, SDLC processes, and environment segregation (Dev/Test/Prod)
• Ability to evaluate control effectiveness and identify control gaps
• Strong organizational skills and ability to manage multiple controls and deadlines

You might also have...

• Experience with GRC platforms (ServiceNow GRC, Archer, AuditBoard, etc.)
• ERP system familiarity (Oracle, SAP, NetSuite, Workday, etc.)
• Experience with control process standardization or improvement initiatives
• Basic data analysis skills (Excel pivot tables, reporting analysis)
• Public accounting or consulting background

We've got your back...  We offer a range of total rewards that may include paid time off, retirement savings (e.g., 401k, pension schemes), bonus/incentive eligibility, equity grants, participation in our employee stock purchase plan, competitive health benefits, and other family-friendly benefits including parental leave. GoDaddy’s benefits vary based on individual role and location and can be reviewed in more detail during the interview process.

We also embrace our diverse culture and offer a range of Employee Resource Groups (Culture). Have a side hustle? No problem. We love entrepreneurs! Most importantly, come as you are and make your own way. 

About us...  GoDaddy is empowering everyday entrepreneurs around the world by providing the help and tools to succeed online, making opportunity more inclusive for all. GoDaddy is the place people come to name their idea, build a professional website, attract customers, sell their products and services, and manage their work. Our mission is to give our customers the tools, insights, and people to transform their ideas and personal initiative into success. To learn more about the company, visit About Us. 

At GoDaddy, we know diverse teams build better products—period. Our people and culture reflect and celebrate that sense of diversity and inclusion in ideas, experiences and perspectives. But we also know that’s not enough to build true equity and belonging in our communities. That’s why we prioritize integrating diversity, equity, inclusion and belonging principles into the core of how we work every day—focusing not only on our employee experience, but also our customer experience and operations. It’s the best way to serve our mission of empowering entrepreneurs everywhere, and making opportunity more inclusive for all. To read more about these commitments, as well as our representation and pay equity data, check out our Diversity and Pay Parity annual report which can be found on our Diversity Careers page.

GoDaddy is proud to be an equal opportunity employer. GoDaddy will consider for employment qualified applicants with criminal histories in a manner consistent with local and federal requirements. Refer to our full EEO policy.

Our recruiting team is available to assist you in completing your application. If they could be helpful, please reach out to [email protected]. 

Colorado Residents: In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.

GoDaddy doesn’t accept unsolicited resumes from recruiters or employment agencies.