I&O SOX Control Operator

Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.

The SOX Control Operator works closely with Control Owners, IT Risk Management (ITRM), internal audit, and external auditors to support walkthroughs, testing, and remediation activities. This role does not own control design, but is accountable for day-to-day control operation and evidence quality.

• Control Execution
  • Execute assigned SOX IT controls (e.g., access reviews, privileged access, termination reviews, configuration and monitoring controls) in accordance with approved control descriptions, frequencies, and procedures.
  • Perform control activities on required cadences (weekly, monthly, quarterly), ensuring completeness and accuracy of execution.
  • Follow documented SOPs and control narratives precisely; identify gaps or ambiguities in procedures and escalate as needed.
• Evidence Collection & Management
  • Collect, validate, and retain control evidence that meets audit standards for completeness, accuracy, and timeliness.
  • Ensure evidence clearly demonstrates who performed the control, when it was performed, what was reviewed, and what conclusions were reached.
  • Upload and manage artifacts in designated repositories and GRC tools (e.g., AuditBoard, SharePoint) in alignment with documented processes.
  • Perform quality checks on generated reports, system outputs, and supporting files prior to submission.
• Issue Identification & Escalation
  • Identify execution issues, missing inputs, late dependencies, or anomalies during control operation.
  • Escalate execution risks, potential deficiencies, or missed control deadlines to the Control Owner in a timely manner.
  • Support Control Owners during deficiency investigation, root cause analysis, and remediation validation.
• Audit & Compliance Support
  • Support internal and external audit activities, including walkthroughs, inquiries, and evidence requests.
  • Respond to auditor questions related to control execution, evidence generation, and operational steps (not control design decisions).
  • Maintain clear traceability between control descriptions, execution steps, and supporting evidence.
• Continuous Improvement & Automation Support
  • Identify opportunities to improve control execution efficiency, standardization, and automation.
  • Participate in automation initiatives (e.g., scheduled jobs, Power Automate workflows, standardized reporting) to reduce manual effort and execution risk.
  • Provide feedback on SOP updates, control rationalization efforts, and tooling improvements.

• Bachelor's degree in Information Systems, Accounting, Finance, Computer Science, or equivalent experience.
• Experience executing SOX IT controls or operational controls in a regulated environment.
• Working knowledge of SOX concepts, IT General Controls (ITGCs), and audit evidence requirements.
• Experience handling control evidence, documentation standards, and audit requests.
• Strong attention to detail and ability to follow defined procedures without deviation.
• Competencies in Microsoft O365 (Advanced Excel is a must).
• Strong Written and Verbal Communication Skills, and Presentation Skills.

• Experience supporting SOX controls in IT Operations domains (e.g., databases, infrastructure, access management, monitoring).
• Familiarity with GRC tools such as AuditBoard and enterprise document repositories.
• Experience with automated or semi-automated control execution and reporting.
• Prior interaction with internal audit, external auditors, or IT Risk Management teams.

• Control execution discipline and documentation rigor.
• Evidence quality and audit readiness.
• Risk awareness and escalation judgment.
• Time management across multiple control cadences.
• Clear written and verbal communication.
• Process adherence with continuous improvement mindset.

Ampcus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veterans or individuals with disabilities.