Senior Analyst, SOX IT Testing PMO

The role:

The Sarbanes-Oxley (SOX) Program Management Office (PMO) and Testing Group at SoFi is part of the Controllership and is responsible for ensuring the company has the necessary internal control and assessment elements in place to meet the SOX requirements. The PMO facilitates risk assessment and scoping to determine project scope of each reporting year, then prepares the internal control assessment plan and accompanying timeline, inclusive of scheduling and conducting walkthroughs for each process and control, and updating corresponding control description and process flowcharts.The Testing team facilitates all SOX management assessments for SoFi and its subsidiaries by attending control walkthroughs and conducting testing for all in-scope systems and controls. The IT Testing team performs testing over IT General Control, IT Automated Controls, Key Reports and IT-related Entity Level Controls. 

Responsibilities for the Sr. Analyst, SOX IT Testing PMO, include, but are not limited to, executing assigned testing, acting as a testing advisor to the lines of business across SoFi Technologies and its subsidiaries, participating in walkthrough meetings, managing follow ups with control owners and identifying opportunities for control testing and control execution automation.  

The Sr. Analyst, SOX IT Testing PMO will report to the SOX IT Testing & Data Analytics Manager, and will work with a mix of direct, indirect, and external team members to execute the program, including the SOX PMO IT Sr Manager and PMO team, to employ strategic and critical thinking skills to develop the testing approaches and methodology. 

SoFi’s fast pace of growth provides career development (e.g., work directly with senior and executive management) and learning opportunities (e.g., new system implementations) considering the role's enterprise-wide exposure.

The Sr. Analyst, SOX IT Testing PMO will work closely with lines of IT and EPD SOX Liaisons to ensure that Internal Controls Over Financial Reporting (ICFR) are appropriately designed and are operating effectively, SOX compliant control documentation is maintained and any deficiencies identified are assessed for severity, remediated, and reported to the SOX Steering Committee.

What you’ll do: 

• Execute the IT control testing and assessments of control design and operating effectiveness, as well as remediation testing where applicable
• Ensuring that any identified deficiencies, as well as other key observations / recommendations are documented and raised with the SOX PMO and Management as appropriate
• Act as subject matter expert in SOX testing area
• Key management consultant, and internal controls expert in building and maintaining ongoing relationships with the various lines of business included in the company's SOX process.
• Responsibilities also include the following: 1) adhering to and complying with all applicable, federal and state laws, regulations and guidance 2) adhering to company policies and procedures, 3) completing required training.
• Support other assignment and ad hoc matters as required

What you’ll need:

• Education: Bachelor's Degree
• Fluent English
• 5+ years of IT SOX related testing experience
• CPA and CIA/CISA or equivalent required
• Practical and deep knowledge of IT SOX, ICFR and COSO and baseline understanding of business process controls
• Expertise in performing IT SOX testing, including ITGCs, ITACs and Key Report Testing (e.g., examining report configurations, scripts)
• Proficiency in SQL, Python and other languages, and experience with Tableau and Alteryx
• Driven by Excellence - you are driven by our mission and our passion for customer success which means you relentlessly pursue excellence, that you do not tolerate mediocrity and you work intensely to achieve your goals
• High Integrity - you seek open and honest communication, and you hold yourself to very high moral and ethical standards
• You reject manipulation, dishonesty and intolerance
• Critical thinking, analytical and strategic skills
• Ability to independently navigate within an ambiguous environment
• Organized, detailed, proactive, self-motivated, collaborative
• Proven ability to work cross functionally and adapt to change are extremely important
• Ability to prioritize workloads and ensure deadlines are consistently met
• High integrity and ability to handle confidential information
• Ability to define deliverables, build budgets and project plans, align resources and specialists for project teams
• Strong project management skills and organizing ability with successful experience in concurrently managing multiple projects at varying levels of technical difficulty 
• Strong teamwork and communication skills (both oral and written)

Nice to have:

• Big 4 Accounting Firm experience is strongly preferred
• Prefer FinTech, banking and/or financial services experience primarily focused on IT SOX or IT enterprise-wide risk management and ICFR controls consulting