Senior SOX Auditor

Job Summary & Responsibilities

The Senior SOX Auditor role focuses on Sarbanes-Oxley (SOX) business process, ITGC and applications control testing.

Roles and Responsibilities:

The Senior SOX Auditor is responsible for ensuring that the SOX processes support compliance with the COSO (Committee of sponsoring organizations of the Treadway Commission) framework of internal controls for financial reporting. The SOX Auditor will develop process narratives and controls documentation, perform assurance procedures to assess the design and effectiveness of business process controls, ITGC and application controls, propose process improvement recommendations, and help prepare reporting for business leadership.

• Participates in planning and scoping of both ITGC, automated application controls, and business process controls
• Leads process walkthroughs for business process, ITGC and application controls and assesses the effectiveness of the processes and controls (Tests of Design)
• Executes testing of business process, ITGC and application controls in accordance with defined test attributes and guidance (Tests of Effectiveness)
• Identify and document IT security risks and opportunities for improvement
• Reviews and assesses impact from issues raised by various partners, both internal and external
• Problem solves and steps in to complete work to meet critical deadlines.
• Conducts root cause analysis, compensating and mitigating controls, and impact analysis
• Prepare and complete testing work papers in Onto Innovation, Inc. audit tool (Auditboard)
• Collect and maintain evidence to support the testing and monitoring of deficiencies
• Monitor, follow up on the status of corrective action plans, and test the remediation of identified deficiencies
• Conduct interviews, analyze data, and formulate recommendations to mitigate identified deficiencies and improve the overall control environment
• Facilitate external auditor's information requests, reach consensus on conclusions, track control deficiencies and coordinate remediation efforts identified by external auditor.

Qualifications

Required Education and Experience:

• Bachelor's degree in accounting, Finance, Management Information Systems, Business Information Systems
• Minimum 3 years business process SOX experience with exposure to ITGC/ITAC
• Experience designing and testing business process controls, ITGC, and application controls, including segregation of duties assessment, identification and analysis of risks and evaluating controls effectiveness
• Understanding of SOX, 2013 COSO framework, COBIT, financial reporting risks, internal controls & test plan development
• Knowledge of infrastructure and IT processes and controls (e.g., change management, backup and recovery, user access/security administration) is required
• External certification preferred: CPA, CIA, CISA, CISM, or CISSP
• Skilled in identifying risks & controls and developing audit tests of controls
• Excellent and clear verbal and written communication skills
• Strong analytical, interpersonal and leadership skills with orientation toward process improvement
• Excellent problem-solving skills
• Proficiency in Microsoft Suite (Excel, PowerPoint and Word)
• Oracle experience preferred
• Ability to travel domestically up to 15%
• Ability to work independently

Onto Innovation Inc. offers competitive salaries and a generous benefits package, including health/dental/vision/life/disability, PTO, 401K plan with employer match, and an Employee Stock Purchase Program (ESPP) along with health & wellness initiatives. We provide a collaborative working environment along with resources, and state-of-the-art tools & equipment to promote success; and a welcoming, inclusive corporate culture where individuals are recognized for their contributions.

Onto Innovation Inc. is an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, national origin, genetic information, age, disability, veteran status, or any other legally protected basis.

For positions requiring access to technical data, Onto Innovation Inc., Inc. may have to obtain export licensing approval from the U.S. Department of Commerce - Bureau of Industry and Security and/or the U.S. Department of State - Directorate of Defense Trade Controls. As such, applicants for this position - except US Citizens, US Permanent Residents, and protected individuals as defined by 8 U.S.C. 1324b(a)(3) - may have to go through an export licensing review process.