APi Group is a global, market-leading business services provider
of safety and specialty services in over 500 locations worldwide.
APi provides statutorily mandated and other contracted services to a strong base of long-standing customers across industries.
We are driven by entrepreneurial business leaders to deliver innovative solutions for our customers.
As our presence across the globe increases, we are striving to become the #1 people-first company in the world.AtAPi Group, our purpose is clear:
We Build Great Leaders .We believe thateveryone at APi is a Leader, andwe provide leadership development programsacross our businesses to facilitate growth.
Our distinct leadership development culture creates an empowered, entrepreneurial atmosphere where our leaders can grow, thrive, and belong.We are currently seeking an IT SOX & Controls Director who will
provide critical global leadership for IT general controls and related IT dependencies (e.g., automated controls, key reports, interfaces, segregation of duties, and restricted access).
The ideal candidate brings an expert level of understanding of benchmarking / baselining strategies and methodologies related to key reports and automated controls.
This leader will ensure further enhancement of the IT SOX controls, risk, and compliance framework in close cooperation with IT leaders, Internal Audit, and business stakeholders.
Furthermore, this leader will be responsible for reporting to internal and external stakeholders as to the effectiveness of ITGC and related IT dependencies.Leadership and oversight of Global IT SOX team s activities, associated budget, and preparation of various reporting to key stakeholders (e.g., business, finance, IT, and external auditors)Responsible for leadership of APi strategic initiatives, policies, and procedures (including operating systems, networks, application processing environments, and information security issues), as well as industry leading practices and emerging trends of the IT and Security control environments to assess how these may impact Global SOX s IT and Security-related audit activitiesLead and coordinate Global IT SOX strategic planning activities to develop short-term and long-term departmental initiatives to create a scalable SOX organization for future inorganic and organic growth, including developing processes and people while implementing technology solutions that drive effectiveness and efficienciesOversee IT staff/independent consultants/outsourced provider and leads IT Global SOX program, including the review of walkthroughs and testing of the operating effectiveness of controls and reportingServe as a key leader and advisor to the business and IT through business transformations (e.g., system implementations, significant upgrades, process re-design including the identification of risks, and design and implementation of relevant business processes and controls with a focus on increased automationResponsible for leading, mentoring, and managing global staff and consultants of approximately 15-20, including hiring, goal setting, planning and delegation of work, training and development, coaching, and conducting annual performance reviews with established deadlinesFacilitate a work environment that fosters and supports ethical decision-making and actions by motivating, promoting and modeling ethical behavior, as well as executing job responsibilities in accordance with APi core values, ethics, and policies and proceduresSustain professional and technical knowledge by expanding this knowledge, personal growth, and development through continuing professional education effortsFoster a long-term results-orientation and business partner mindset within the IT SOX, Risk, and Compliance TeamsPolicy Development and ImplementationOversee the development and execution of the company s IT SOX compliance program while ensuring compliance with regulatory rules and deadlinesEvaluate the design of internal control activities, maintain and update key controls, and ensure IT SOX documentation reflects a high level of qualityCoordinate with IT leadership on designing, implementing, and evaluating IT general and automated system controls and configurationsParticipates in the development of the annual audit plan utilizing a risk-based approach, including the implementation and utilization of emerging technologies (e.g., Future of Controls)Assists in the acquisition and maintenance of audit and process/data automation for the Global IT SOX Department as well as the application of new technologies into the program (e.g.
Data analytics)Compliance Training:
Develop and deliver comprehensive and recurring SOX compliance training for relevant staff across the Systems TeamsRisk Management and AssessmentsControl deficiency evaluation and remediation:
Define and monitor remediation action plans and implementation for all management, internal, and external audit-identified deficiencies.
Assist management with deficiency evaluation:
root cause, exposure, and identification of mitigating controlsConduct risk assessments of IT projects, financial reporting processes, and information systems, and coordinate the scope of the annual SOX assessment process, ensuring adequate coverage with internal auditEnsures the overall quality, consistency, risk management, and adherence to IA policies and procedures, IA Standards, and regulatory requirementsEnsure adherence to principles, policies, and standards and improve quality and process reliability in a cost-effective manner.
Facilitate communications, problem resolution, and provide appropriate feedback, both positive and corrective, within the teamMonitor changes in regulations and proactively address emerging IT SOX compliance challengesInternal Controls and AuditsPlans, executes, and reports on IT and Security-related controls, including in deficiency management and remediation processAudit Liaison:
Serves as the key point to external auditors, internal auditors and process owners on all matters related to IT SOX compliance, including evaluation and resolution of identified control deficienciesCoordinates IT and Security-related activities with external auditors and assures maximum reliance on work performedCollaborate with process owners and others to build knowledge and understanding of risks and controlsIdentify areas of opportunity for process improvementQualifications:
10+ years of IT auditing experience at a global level, specializing in areas such as IT governance, project management, infrastructure management, software development, and cybersecurity riskExperience designing, monitoring, or evaluating internal controls and SOX compliance for a multinational organizationExpertise with SOX compliance requirements, and a solid understanding of accounting and finance processesTrack record of leading IT and Information Security (IS)-related engagements and liaising with external auditors and regulatory agenciesProficiency in developing IT and IS risk-based audit work programs and conducting risk-based auditsRecognized professional qualifications such as CPA, CIA, or CFE strongly preferredFamiliarity with state, federal, and international laws and regulations affecting internal audit, accounting, and management controlsCompetencies and Skills:
Demonstrated leadership across global, cross-functional teams and ability to foster strong working relationshipsExcellent communication skills and ability to influence and .