IT GRC SOX Specialist – Regulatory Frameworks

About the role

The IT GRC SOX Specialist will join AVEVA's IT GRC team to embed effective IT governance, risk and compliance across the organisation. The initial focus is on designing, operating and scaling SOX IT General Controls (ITGC) and IT Application Controls (ITAC) for core platforms such as Oracle and Salesforce.

Key responsibilities

• Lead implementation and ongoing operation of the IT control framework aligned to SOX and other regulatory requirements.
• Own SOX scoping for systems, applications, infrastructure, interfaces and outsourced services in partnership with Finance and Internal Audit.
• Maintain inventory of IT risks, controls, owners, testing frequency, evidence requirements and framework mappings.
• Collect high‑quality evidence to demonstrate effective control operation and meet audit standards.
• Act as primary contact for Internal Audit, External Audit and other GRC teams, coordinating walkthroughs and audit requests.
• Define and maintain IT GRC scope within the Four Lines of Defence model.
• Prepare audit submissions, management responses and materials for senior leadership.
• Operate the IT risk radar, reporting trends, key risks and residual exposure.
• Develop, publish and deliver training on IT policies, standards and procedures.
• Measure compliance, coordinate remediation activities and validate closure evidence.
• Drive continuous improvement, including automation of control evidence collection.

Required profile

• Strong understanding of SOX, ITGC and ITAC frameworks.
• Experience working with IT, Security, Finance, Internal Audit and External Audit stakeholders.
• Ability to manage risk inventories, evidence collection and audit documentation.

Required skills

• Oracle
• Salesforce
• SOX compliance
• IT General Controls (ITGC)
• IT Application Controls (ITAC)