IT SOX Scoping and Governance Analyst

IT SOX Scoping and Governance Analyst, full-time, with compensation of GBP 68,000–87,500 yearly.

Wise is a global technology company building a way to move and manage money internationally. The role joins the Security Controls team, which safeguards Wise’s complex IT landscape through comprehensive testing, assessment and continuous improvement of technology-related controls. The successful candidate will drive scope rationalisation, dependency mapping and control optimisation across a global platform.

Responsibilities include analysing and challenging existing IT SOX scope across applications and infrastructure; identifying duplicate, redundant or over-engineered ITGCs and ITACs and proposing enhancements; establishing risk and control matrices and identifying required ITGCs and ITACs for newly in-scope SOX applications and platforms; documenting and maintaining end-to-end dependency maps covering data flows, infrastructure ties and automated interfaces; supporting design and operating effectiveness control testing across the cloud infrastructure and SaaS landscape; and partnering with stakeholders across Finance, Risk, Security and Platform to communicate SOX 404 requirements and expectations.

Applicants should have at least three years’ experience in Technology Risk or IT Audit, with a dedicated focus on SOX, and deep knowledge of SOX 404 requirements, the COSO framework and IT control frameworks including NIST and ISO 27001. Demonstrable experience with first-time SOX audits in cloud-native environments is required, together with an understanding of how compliance frameworks map to dynamic infrastructures. Candidates should understand change management in CI/CD pipelines and access management in microservices architectures. Experience with AWS, Terraform, GitHub, Jira, Okta and SailPoint is preferred.

The role requires the ability to assess the quality of risk and control matrices, identify missing or excessively duplicative coverage from system architecture diagrams or control frameworks, translate technical architecture details into audit-ready documentation, and explain compliance requirements clearly to engineers.

Wise has an international team and is committed to diverse, equitable and inclusive teams where people feel respected, empowered to contribute and able to progress in their careers.