IT SOX Controls Specialist

Stripe
Seattle, San Francisco, New York
Workplace: OnsiteFull timeFunction: Legal, Risk & ComplianceExperience: 10+ yearsEducation: bachelorsSkills: ["Communication","Influencing senior leaders","Managing concurrent workstreams","Project management","Independent execution"]

Own the end-to-end SOX assessment lifecycle for third-party applications that impact Stripe’s financial reporting. Evaluate SOC 1/2 reports, assess CUECs, and design controls to close gaps. Build SOX-ready documentation (RCMs, narratives, process diagrams), project manage third-party control implementation, and partner with IT, Procurement, and business stakeholders to embed control requirements into vendor onboarding and reviews. Track deficiencies through corrective action and support sub-certification processes.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Stripe
Stripe
2 days ago

IT SOX Controls Specialist

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 4 hours agoStatus: Live

Job Summary

Own the end-to-end SOX assessment lifecycle for third-party applications that impact Stripe’s financial reporting. Evaluate SOC 1/2 reports, assess CUECs, and design controls to close gaps. Build SOX-ready documentation (RCMs, narratives, process diagrams), project manage third-party control implementation, and partner with IT, Procurement, and business stakeholders to embed control requirements into vendor onboarding and reviews. Track deficiencies through corrective action and support sub-certification processes.
Location: Seattle, San Francisco, New York
Workplace: Onsite
Employment Type: Full time
Job Function: Legal, Risk & Compliance
Seniority: Mid level

Key Responsibilities

  • •Own the end-to-end SOX assessment lifecycle for third-party applications in scope for financial reporting.
  • •Lead evaluation and review of third-party SOC 1 and SOC 2 reports, assessing CUECs and identifying gaps requiring compensating controls.
  • •Design and implement controls addressing risks from third-party systems and integrations impacting the financial reporting supply chain.
  • •Develop and maintain SOX-ready documentation for third-party control environments, including RCMs, narratives, and process flow diagrams.
  • •Project manage control definition and implementation for new third-party system implementations, migrations, and integrations with financial reporting impact.

Key Requirements

  • •Bachelor's degree; Master's degree a plus in Accounting, Information Systems, Finance, or related field.
  • •Technical certification required (e.g., CPA, CIA, CISA, PMP).
  • •10+ years of work experience managing and/or assessing SOX programs.
  • •Big 4 audit firm or equivalent audit experience.
  • •Hands-on experience evaluating third-party SOC reports (SOC 1 / SOC 2) and assessing CUEC coverage and gaps.
Experience:10+ yearsSOXAuditFintechFinancial servicesPaymentsEcommerceSaaS
Education:Bachelor's
Skills:CommunicationInfluencing senior leadersManaging concurrent workstreamsProject managementIndependent execution
Certifications:CPACIACISAPMP
Languages:English
Tech Stack:SOC 1SOC 2SSAE 18ISAE 3402CUECsRisk and control matrices (RCMs)Risk tieringJIRAAuditBoardVendor onboardingInformation Produced by the Entity (IPE)

Company Brief

Stripe
Provides payment processing APIs and financial infrastructure for internet businesses. Powers online payments for millions of companies from startups to Fortune 500s.
Industry: Payments
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Scaleup
Valuation: Decacorn (USD 10B+)
Funding: Series E+
Headquarters: San Francisco, United States
Founded: 2010
Glassdoor
Glassdoor: 4.2
WebsiteLinkedInGlassdoor