Security Consultant IV-Security Risk Management

When you join Verizon

You want more out of a career. A place to share your ideas freely — even if they’re daring or different. Where the true you can learn, grow, and thrive. At Verizon, we power and empower how people live, work and play by connecting them to what brings them joy. We do what we love — driving innovation, creativity, and impact in the world. Our V Team is a community of people who anticipate, lead, and believe that listening is where learning begins. In crisis and in celebration, we come together — lifting our communities and building trust in how we show up, everywhere & always. Want in? Join the #VTeamLife.

What you’ll be doing...

We are seeking an experienced IT and Business SOX Compliance Specialist with 9+ years of experience to lead and manage SOX compliance initiatives across IT and business processes. The ideal candidate will be responsible for ensuring internal controls over financial reporting (ICFR) are effectively designed, implemented, and maintained across IT systems and key business processes. This role requires strong collaboration with IT, Finance, Internal Audit, and Business Process Owners to ensure compliance with SOX requirements and handling the end-to-end automations for all of the manual audit works handled by the performer, evaluator and governance reviewer.

• Lead SOX compliance programs covering both IT General Controls (ITGC) and Business Process Controls across the organization.
• Partner with IT teams, Finance, and Business Process Owners to ensure internal controls over financial reporting (ICFR) are well-documented, tested, and operating effectively.
• Perform risk assessments to identify and assess SOX risks across IT systems and business processes.
• Design, implement, and review key controls for business processes and IT applications (including access controls, change management, data integrity, and system development lifecycle).
• Coordinate with internal and external auditors to provide requested documentation, explanations, and walkthroughs during SOX audits.
• Identify control gaps, assess the impact, and work with stakeholders to develop and implement remediation plans.
• Develop and maintain SOX documentation, including process narratives, control matrices, and risk assessments.
• Conduct training and awareness programs to ensure IT and business teams understand their roles and responsibilities related to SOX compliance.
• Monitor emerging regulatory requirements and best practices to continuously enhance the SOX program.
• Track control testing results, remediation efforts, and provide regular reporting to management on SOX compliance status.
• Collaborate with third-party vendors to ensure their systems and processes comply with SOX and internal control requirements, where applicable.
• Design and develop automation of manual tasks of key controls for business processes and IT applications (including access controls, change management, data integrity, and system development lifecycle).
  
  

What we’re looking for...

You are curious and thorough. You enjoy finding security gaps—or even better anticipate them-- and figuring out ways to repair them. You’re a great teammate and you build trusting relationships with customers. You can balance multiple projects and you’re not afraid of a deadline or two. And you understand the importance of your role in keeping your customer’s private information safe and secure.

Where you'll be working…

In this hybrid role, you'll have a defined work location that includes work from home and assigned office days set by your manager.

You’ll Need To Have

• Bachelor’s degree or six or more years of work experience.
• Six or more years of experience in SOX compliance, IT audits, internal controls, and risk management, with experience covering both ITGC and business process controls.
• Deep understanding of SOX requirements, COSO framework, and ICFR concepts.
• Proficiency in GSUITE, MS Excel, Word, PowerPoint, and SAP GRC tools.
• Strong knowledge of IT controls, including logical access, change management, system development lifecycle, and data integrity controls.
• Experience working with ERP & SAAS systems (SAP, Oracle, Workday, EPM), Middleware systems and other key financial and operational systems.
• Experience working as consultant for information security solutions, especially in a professional services environment in performing and handling Third party vendor external audits
• Experience in Enterprise Risk assessments and implementing mitigation solutions
• Demonstrated ability to assess risk, identify control deficiencies, and design effective controls.
• Experience collaborating with external auditors, internal audit teams, and business stakeholders.
• Strong analytical, documentation, and project management skills.
• Excellent communication and stakeholder management abilities.
  
  

Even better if you have one or more of the following:

• Professional certifications such as CISA, CPA, CIA, or CRISC.
• Experience working in publicly traded companies or regulated industries.
• Familiarity with cloud computing environments and associated risks and controls.
• Experience in driving process improvement initiatives related to SOX compliance.
• Experience working with ServiceNow GRC, Audit Board, or similar tools.
  
  

If Verizon and this role sound like a fit for you, we encourage you to apply even if you don’t meet every “even better” qualification listed above.

Where you’ll be working

In this hybrid role, you'll have a defined work location that includes work from home and assigned office days set by your manager.

Scheduled Weekly Hours

40

Equal Employment Opportunity

Verizon is an equal opportunity employer. We evaluate qualified applicants without regard to race, gender, disability or any other legally protected characteristics.