Program Manager, IT SOX Compliance – Apple Ads

At Apple we work every day to create products that enrich peoples lives. Our Apple Ads group makes it possible for people around the world to easily access informative and imaginative content on their devices while helping publishers and developers promote and monetize their work. Today our technology and services power advertising in App Store Apple News Stocks and Video. Our platforms are highly-performant deployed at massive scale and setting new standards for enabling effective advertising while protecting user privacy.

The Apple Ads team has an immediate opening for an IT SOX Compliance Program Manager and is looking for a driven and detail-oriented IT audit or SOX compliance professional who can understand complex technical environments evaluate IT control risks and partner effectively with engineering teams to design and improve scalable compliance processes. This is a hands-on role that will directly interact with engineering teams across Apple Ads as well as cross-functional stakeholders across Apple to support SOX compliance and strengthen the organizations IT control position requires a teammate and self-starter with experience working on cross-functional tactical and detail-oriented initiatives to achieve business operational and technical goals. The ideal candidate brings strong knowledge of SOX compliance methodologies IT General Controls (ITGCs) and audit practices along with the ability to operate effectively in fast-paced and highly technical environments.

Partner with engineering and infrastructure teams to establish evaluate and improve IT General Controls (ITGCs) supporting SOX compliancenDevelop and maintain clear detailed and accurate SOX documentation including process flows control descriptions risk control matrices and audit work papersnCoordinate SOX compliance activities with control owners engineering stakeholders external auditors and cross-functional compliance teamsnSupport the planning and execution of SOX activities including scoping walkthroughs control identification testing coordination evidence review and reportingnReview control execution artifacts and audit evidence to ensure compliance with SOX testing and documentation standardsnProvide guidance on controls related to change management access management SDLC processes database administration operating systems and cloud-based infrastructure (e.g. AWS GCP Azure)nMonitor and track remediation efforts for identified control gaps and audit findings driving accountability and timely resolution across stakeholdersnPartner with teams to identify opportunities for control automation monitoring improvements and operational efficiencynCommunicate compliance risks audit observations and remediation priorities clearly to technical and non-technical stakeholdersnHelp cultivate a continuous compliance mindset across the organization through partnership education and process improvement initiatives

5 years of experience in IT SOX compliance IT audit internal controls or external auditnStrong experience with SOX IT General Controls (ITGCs) including testing methodologies control evaluation documentation standards and audit evidence requirementsnExperience partnering with engineering or infrastructure teams in large-scale technical or cloud-based environmentsnStrong understanding of controls related to change management access management SDLC processes databases operating systems and cloud infrastructurenProven ability to assess technical and compliance risks and drive remediation efforts across cross-functional stakeholdersnStrong communication organizational and project management skillsnAbility to navigate ambiguity manage multiple priorities and influence across technical and non-technical teamsnBachelors Degree

Experience at a Big 4 accounting firm strongly preferrednExperience supporting SOX compliance programs at a large public technology company preferrednExperience working with cloud-based infrastructure and definition of IT controlsnFamiliarity with GRC or compliance management toolsnFamiliarity with compliance processes supporting large-scale distributed systemsnCISA CISSP or equivalent certification preferred