Senior Manager, SOX IT Compliance

SUMMARY

As Senior Manager of IT SOX Compliance, you will lead the enterprise-wide IT SOX compliance program, reporting to the Director of SOX Compliance — with a focus on governance, risk assessment, control design evaluation, and program oversight. Our SOX team does not perform control testing, so this role serves in an advisory capacity centered around program ownership, risk and control design oversight, coordination with control owners, facilitation of remediation, training, and partnership with Internal Audit and external auditors.

ESSENTIAL DUTIES AND RESPONSIBILITIES

• Lead the company’s IT SOX compliance program, ensuring that financial reporting risks tied to technology and data are appropriately mitigated.

• Provide thought leadership on new business initiatives, system implementations along with system development life cycle controls (SDLC’s), IT policy changes, personnel changes, assessing the impact to the SOX compliance program, and advising the business accordingly.

• Conduct and update risk assessments and scoping, especially around systems supporting financial reporting, revenue recognition, etc.

• Partner with cross-functional stakeholders in IT, Finance, and Internal Audit to maintain strong control design and accountability.

• Maintain and oversee SOX documentation, including risk and control matrices (RCMs), process and data flows, system diagrams, etc.

• Support process owners through training, reviewing, and providing guidance for their processes including, but not limited to, IT General Controls, IT Operations and SOC Reporting.

• Facilitate the deficiency management and remediation process, from root cause analysis to retesting readiness.

• Support the implementation of automation and continuous control monitoring as part of control enhancement efforts.

• Manage review of SOC Reports and mapping to complementary user entity controls (CUEC’s)

• Track and communicate program status, issues, and risks to the Director of SOX Compliance, including preparation of reports for the SOX Steering Committee and Audit Committee.

• Monitor emerging risks in IT compliance, including cybersecurity threats that could impact SOX controls.

• Other duties may be assigned.

DESIRED FUNCTIONAL SKILLS

• A team player and process-oriented focus with excellent interpersonal, analytical, and problem-solving skills.

• Exhibit critical thinking skills and ability to complete tasks with appropriate level of skepticism.

• Proficiency in annual and rolling SOX scoping based on risk factors and materiality.

• Deep understanding of ITGCs.

• Competence in identifying and assessing application controls, key reports, and interface controls.

• Skilled in documenting IT processes, process and data flows, and risk and control matrices (RCMs).

• Strong project management capabilities for handling timelines, milestones, and dependencies.

• Familiarity with ERP systems (e.g., Oracle Cloud, NetSuite, PeopleSoft).

• Ability to review SOC 1 reports and assess reliance on third-party controls.

• Able to translate complex IT and control concepts into business-friendly language.

• Experience with audit software like AuditBoard is a plus.

• Ability to travel 15 - 20% on average annually.

• Ability to work remotely with team members in multiple locations.

• undefined

DESIRED EDUCATION, EXPERIENCE AND CERTIFICATIONS

• Bachelor’s degree in Information Systems, Accounting, Finance, or related field.

• Relevant professional certification is preferred, such as Certified Information Systems Auditor (CISA), Certified information systems security professional (CISSP), Certified Information Security Manager (CISM), Certified in Risk and Information Security Controls (CRISC).

• 8+ years of relevant experience, including IT SOX, IT audit, or risk management at a public company or Big 4/public accounting firm.

• Strong understanding of SOX 404, COSO, COBIT, and PCAOB standards.

Our Values

• EVERYONE BELONGS - We believe connectedness and belonging are the essential ingredients to our success

• DO THE RIGHT THING - We are relentlessly focused on quality and integrity and make the right choices, even when it's difficult

• PEOPLE FIRST - To craft positive experiences for our customers, we take care of each other first

• INNOVATE TO WIN - We champion and challenge for a better way in all we do

• HAVE FUN - We find joy, create meaningful impact and celebrate the journey together

Our Core Competencies

• CUSTOMER CENTRIC - We leverage data and insights to craft a customer experience that builds relationships, cultivates trust, and delivers excellence

• RESULTS DRIVEN – We focus on measurable outcomes by remaining optimistic, tenacious, and persistent even in the face of challenges

• CONTINUOUS IMPROVEMENT - We champion for better through strategic risk taking, experimentation and challenging the status quo

• BIAS FOR ACTION - We courageously lead, drive towards decisions, and maintain agility to meet the demands of our dynamic industry

• WINNING TOGETHER - We work together to unlock our full potential by actively collaborating and contributing in a cross-functional capacity

Papa Johns is an equal opportunity employer.

Papa Johns is a federal contractor that participates in the E-Verify program to confirm employment eligibility for each new team member. We also comply with all Right to Work requirements. Official E-Verify and Right to Work notices are available for applicants to review in both English and Spanish.

It is the policy of Papa John’s to provide equal employment opportunities for all applicants and team members without regard to race, color, religion, sex, age, marital status or civil partnership, national or ethnic origin, pregnancy or maternity, veteran status, uniformed service (as defined by 10 U.S.C. §101 (a)(5)), protected disability status, genetic information, sexual orientation, gender identity, gender reassignment, or gender expression, or any other characteristic protected by statute or law.