Burke & Herbert BankNASDAQ: BHRB: Community bank offering personal, business, and wealth management services.
8+ YOEStrong knowledge of SOX 404, ICFR, COSO; CPA preferred; 8–12 years in public accounting, internal audit, SOX, or financial controls; experience with external auditors in banking/finance.
Freddie MacOTCQB: FMCC: Purchases and securitizes home mortgages for the secondary market.
2+ YOE2+ years experience in public accounting, risk management, or internal audit; strong GAAP/GAAS/PCAOB/SOX knowledge; audit methodology and data analytics skills; strong communication and prioritization skills; CPA/CIA preferred.
WidePointNYSE American: WYY: Provider of secure mobile management and cybersecurity IT solutions.
8+ YOEBachelor's degree in accounting, finance, business administration, or related field; 8–12 years of SOX, internal audit, controls, financial reporting, or related experience; leadership in SOX 404 implementation required.
New York City or Seattle or Washington or San Francisco or San Jose or Baltimore or Bellevue or Martinez or Arlington or Cupertino
$98k-$137k/yrHybridFull Time
BlackBerryNYSE: BB: Provides cybersecurity software and secure embedded systems for businesses.
4+ YOE4+ years public accounting or industry experience; knowledge of SOX, US GAAP, COSO; strong communication and critical thinking; eligible CPA experience; audit and SOX testing experience.
SOX & Internal Controls Compliance IT Manager, CoStar Group - Arlington, VA
Arlington, Virginia, United States
OnsiteFull Time
CoStar GroupNASDAQ: CSGP: Global provider of commercial and residential real estate data.
7+ YOEBachelor's in Information Systems/Accounting/Finance required; 7+ years IT risk/internal controls experience; SOX, ITGC, COSO knowledge; experience at a public company or Big 4; CPA/CIA/CISA/CISSP preferred.
SOX 404, COSO, IT General Controls (ITGCs), ERP, Oracle Cloud, SOC 1, SOC 2, COBIT, NIST CSF, NIST 800-53, NIST 800-171, ITIL, ISO 27001, ISO 27002, PCAOB
Senior Analyst, IT Internal Controls & SOX Compliance
San Francisco or Salt Lake City or Phoenix or Los Angeles or Chicago or Boston or Austin or New York City or Miami or Tampa or Atlanta or Columbus or Boise or San Diego or Minneapolis or Houston or Raleigh or Nashville or Kansas City or Charlotte or Portland or Philadelphia or Dallas or Washington D.C. or Seattle
$113k-$148k/yrRemoteFull Time
CircleNYSE: CRCL: Digital currency issuer and blockchain financial infrastructure provider.
4+ YOE4+ years Big 4 IT audit/controls experience, Bachelor's in related field, CPA/CISA/CIA/CISSP required; strong SOX/ITGC knowledge, cloud/SaaS/SDLC/IAM experience, ERP/GRC familiarity, and stakeholder communication skills.
Slack, Apple MacOS, Google Workspace, ERP, GRC, AI
ICFNASDAQ: ICFI: Provides strategic consulting and technology services to global organizations.
4+ YOEBachelor's degree in accounting, finance, management information systems, or related field; 4+ years in SOX or public-company internal audit; Big Four or public-company experience; COSO, US GAAP, and PCAOB experience.
San Francisco or Atlanta or Chicago or Washington or United States or Dallas or California or Philadelphia or Seattle
$99k-$232k/yrHybridFull Time
PwC: Providing audit, tax, and management consulting services to businesses.
5+ YOEBachelor's degree and 5+ years of experience required; auditing, internal controls, risk assessment, data analysis, project and stakeholder management, and technology expertise preferred.
AmazonNASDAQ: AMZN: Global online retail and cloud computing technology provider.
5+ YOE5+ years compliance, audit, or risk management experience; Bachelor’s degree or equivalent required; deep knowledge of COSO 2013, SEC/PCAOB, ITGCs, SOX scoping, control design, testing, remediation, and GRC platforms.
Baltimore or Chicago or Washington or Oakbrook Terrace
$161k-$241k/yrHybridFull Time
ExelonNasdaq: EXC: Provides regulated electricity and natural gas utility services.
12+ YOE5+ MgmtBachelor's degree, 12+ years of progressive experience, 5 years of supervisory experience, department leadership, and enterprise SOX, internal controls, audit, or equivalent risk and controls experience.
SOX, Information Technology, automation, data analytics
King of Prussia or Washington or Maryland or Norfolk or Arlington or Philadelphia or New Cumberland or North America
$109k-$130k/yrRemoteFull Time
Qlik: Provides data integration and analytics software for business intelligence.
5+ YOEBachelor's degree and 5+ years in auditing, compliance, project management, or business analysis. FedRAMP compliance leadership required; knowledge of NIST, SOX, GDPR, HIPAA, and strong analytical skills expected.
FTI ConsultingNYSE: FCN: Global business advisory firm helping organizations manage change and risk.
8+ YOECPA required; minimum 8 years accounting or Big Four experience; strong U.S. GAAP, SOX, ASC 606 knowledge; advanced Microsoft Excel; ERP experience; prior people leadership and audit interaction experience.
U.S. GAAP, SOX, ASC 606, Microsoft Excel, ERP systems
Hamilton Beach BrandsNYSE: HBB: Designs and distributes small household and commercial electric appliances.
5+ YOEBachelor's degree and 5+ years applicable experience; 3+ years IT department experience; 5+ years IT audit/audit experience; experience with IT risk assessments, GDPR/GLBA/PCI, SOX support, and IT training; strong communication and stakeholder influence.
GDPR, GLBA, PCI, COIT, NIST, ISO 27001, SOX, e-Discovery
New York City or New York or Connecticut or New Jersey or United States or California or Boston or Chicago or Seattle or Washington
$208k-$278k/yrRemoteFull Time
SalesforceNYSE: CRM: Sells cloud-based customer relationship management and business software solutions.
15+ YOE15+ years IT cybersecurity leadership with CISO-level advisory experience, AI governance expertise, familiarity with NIST/SOX/DORA/NYDFS/CMMC, SSPM and SIEM platforms, Salesforce security products, strong executive communication, and willingness to travel ~30–40%.
NIST, SOX, DORA, NYDFS, CMMC, SSPM, SIEM, Varonis, Obsidian, Microsoft Sentinel, CrowdStrike, Shield, Security Center, Event Monitoring, Backup & Recovery, Data Detect, LLM, Trailhead
KBRNYSE: KBR: Provides engineering, technology, and professional services for global markets.
10+ YOE4+ MgmtBachelor's degree and 10+ years in IT audit, risk, controls, or compliance, including 4+ years leading IT SOX programs and audit teams; expertise in IT controls, SOX 404, risk assessment, and leadership.
IT General Controls (ITGCs), Software Development Lifecycle (SDLC), COBIT, NIST, ERP
Castro & Company: Audit and advisory services firm specializing in government clients.
1+ YOEBachelor’s in Accounting; 1 year internal controls/SOX/A-123; strong analytical skills; MS Office; U.S. Citizenship; ability to obtain government suitability.