IT GRC SOX Specialist - Regulatory Frameworks

Aveva
Cambridge, London
Workplace: HybridFull timeFunction: Quality & Regulatory (Non-Software)Experience: 5+ yearsSkills: ["Documentation","Facilitation","Training","Communication","Quality mindset"]

Implement and strengthen SOX-aligned IT controls across ITGCs and supporting processes, including access, change, IT operations, and SDLC/release governance. Lead control uplift and transition IT SOX testing, evidence, and issue management into BAU assurance, including interim workflows while configuring Riskonnect. Train IT teams to operate controls, coordinate auditor support, and drive improved audit outcomes through sustainable assurance routines.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Aveva
Aveva
1 day ago

IT GRC SOX Specialist - Regulatory Frameworks

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 11 hours agoStatus: Live

Job Summary

Implement and strengthen SOX-aligned IT controls across ITGCs and supporting processes, including access, change, IT operations, and SDLC/release governance. Lead control uplift and transition IT SOX testing, evidence, and issue management into BAU assurance, including interim workflows while configuring Riskonnect. Train IT teams to operate controls, coordinate auditor support, and drive improved audit outcomes through sustainable assurance routines.
Location: Cambridge, London
Workplace: Hybrid
Employment Type: Full time · Permanent
Job Function: Quality & Regulatory (Non-Software)
Seniority: Mid level

Key Responsibilities

  • •Implement and uplift SOX-aligned IT controls and support the transition to BAU IT SOX assurance.
  • •Conduct current-state assessments and gap analysis of IT controls against SOX expectations, providing guidance as needed.
  • •Test ITGCs and supporting procedures across Access Management, Change Management, IT Operations, and SDLC/release governance.
  • •Create and maintain control documentation (narratives, flowcharts, RCMs, control procedures, evidence checklists) and run knowledge transfer.
  • •Enable Riskonnect for IT SOX processes where possible (control library, RCM mapping, testing workflow, issue/remediation tracking) and coordinate auditor walkthroughs and evidence requests.

Pay and Benefits

Perks:PensionLife CoverHealth InsuranceParental LeaveLearning BudgetAnnual Leave

Key Requirements

  • •Strong experience operating SOX ITGCs and supporting SOX audits (walkthroughs/testing/remediation).
  • •Practical experience embedding IT controls into IT processes and setting up effective interim approaches in evolving tooling environments.
  • •Proven ability to coach and upskill IT teams and build sustainable control ownership.
  • •Experience with GRC tools (Riskonnect desirable) and standard IT tooling used to extract data for SOX controls.
  • •Strong SOX/ICFR understanding aligned to audit expectations, including knowledge of COSO and familiarity with COBIT, ITIL (ISO 27001 / NIST helpful).
Experience:5+ yearsGRCSOXITInformation SecurityRisk & Audit
Skills:DocumentationFacilitationTrainingCommunicationQuality mindset
Tech Stack:Riskonnect

Company Brief

Aveva
Provides industrial software for engineering, design, and information management across industries including oil & gas, manufacturing, and utilities. Delivers solutions for digital transformation, asset performance, and operations optimization.
Industry: Industrial Automation
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Cambridge, United Kingdom
Founded: 1967
Glassdoor
Glassdoor: 3.6
WebsiteLinkedIn