IT SOX Controls Tester

Wise is looking for an IT SOX Controls Tester to join its Security Controls team and help build a global platform that is scalable, reliable and secure. The team safeguards Wise’s complex IT landscape through comprehensive testing, assessment and continuous improvement of technology-related controls. This role focuses on testing controls in a cloud-native environment rather than legacy IT systems.

The role involves performing design and operating effectiveness testing for Access Management, Change Management and IT application controls across Wise’s cloud infrastructure and SaaS landscape. You will partner with stakeholders across Finance, Risk, Security and Platform to communicate SOX 404 requirements and expectations, support control owners in maturing the risk and control environment, and use data analytics and automation to assess control design and operating effectiveness. You will maintain high-quality documentation and ensure testing methods comply with SOX 404 requirements.

You should have deep knowledge of SOX 404 requirements, the COSO framework and IT control frameworks including NIST and ISO27001, with an understanding of how compliance frameworks map to dynamic infrastructures. The role requires at least three years’ experience in Technology Risk or IT Audit, with a dedicated focus on SOX, as well as demonstrable experience with first-time SOX audits in cloud-native environments. You should understand Change Management in a CI/CD pipeline and Access Management in a microservices architecture. Experience with AWS, Terraform, GitHub, Jira, Okta and SailPoint is preferred.

You will be expected to modernise testing methodologies through data analytics and automation, reduce reliance on manual processes and enhance control coverage. You should work effectively in a cross-functional environment, articulate complex control findings to engineers and explain complex technical risks to finance stakeholders.

Wise is committed to diverse, equitable and inclusive teams. It has an international team and aims to ensure every employee feels respected, empowered to contribute to its mission and able to progress in their career.