IT SOX Program Manager

About our Team:

As a SOX Program Manager, you will serve as the leader responsible for the governance, execution, continuous improvement, and operational effectiveness of Micron's Sarbanes-Oxley (SOX) compliance program. Our team partners closely with Finance, Accounting, Internal Audit, External Audit, IT, Cybersecurity, Engineering, Data & Analytics, ERP teams, Control Owners, and business stakeholders to maintain a sustainable, scalable, and audit-ready control environment. Together, we drive strong internal controls, regulatory compliance, and continuous improvement across a complex global technology environment.

Position Overview:

The SOX Program Manager provides enterprise-wide oversight of IT General Controls (ITGCs), automated controls, key reports, application controls, business process controls, and SOX governance activities while ensuring compliance with regulatory requirements and internal control standards. This role leads risk-based control optimization, remediation governance, testing readiness, executive reporting, and continuous control improvement efforts while ensuring alignment with evolving business processes, technology platforms, and regulatory expectations. In addition, you will lead AI-enabled compliance transformation initiatives to improve control monitoring, evidence collection, testing efficiency, issue management, reporting capabilities, and overall program effectiveness.

Responsibilities:

• Own and lead the enterprise SOX compliance program, ensuring compliance with Sarbanes-Oxley requirements and internal control standards.

• Establish and maintain governance processes for SOX compliance, including planning, risk assessment, control scoping, testing coordination, issue management, and executive reporting.

• Oversee IT General Controls (ITGCs), automated controls, key reports, interfaces, privileged access controls, change management controls, and application controls supporting financial reporting.

• Coordinate control testing activities with Internal Audit, External Audit, Finance, IT, and business process owners while ensuring timely collection, review, and quality validation of testing evidence.

• Govern the end-to-end lifecycle of SOX findings, deficiencies, audit observations, and remediation activities, including root cause analysis, corrective actions, continuous improvement, automation, and executive reporting.

Minimum Qualifications:

• 8+ years of experience in SOX compliance, Internal Audit, IT Audit, Risk Management, Controls Management, Finance Systems, Information Security, or related disciplines.

• 5+ years of experience leading enterprise compliance, audit, controls, or risk management programs.

• Strong experience leading enterprise SOX compliance programs within large, complex organizations.

• Expert knowledge of IT General Controls (ITGCs), Segregation of Duties (SoD), Identity and Access Management, Change Management, System Development Life Cycle (SDLC), Operations Controls, and Automated Controls.

• Experience managing external audit relationships and coordinating large-scale compliance testing activities.

Preferred Qualifications:

• Demonstrated ability to design, evaluate, optimize, and sustain effective controls in highly complex technical and business environments.

• Strong understanding of financial systems, ERP environments, and supporting technologies including SAP, Oracle, Workday, ServiceNow, Identity Management solutions, and cloud platforms.

• Proven experience leading control modernization, continuous monitoring, automation, AI-enabled compliance transformation initiatives, and leveraging data analytics and workflow technologies within compliance programs.

• Experience developing executive-level reporting, board materials, compliance metrics, Key Performance Indicators (KPIs), Key Risk Indicators (KRIs), remediation governance programs, and executive presentations.

• Experience operating within large global manufacturing, semiconductor, technology, or publicly traded organizations; professional certifications such as CPA, CISA, CISSP, CRISC, CGRC, CIA, CISM, PMP, or equivalent are highly desirable.