[Hiring] Lead Analyst, SOX Compliance (AWS) @Genesys

Role Description

The Lead Analyst, SOX Compliance (AWS) is a key member of the Corporate Governance, Risk & Compliance team and owns the day-to-day execution and continuous improvement of the company’s Sarbanes Oxley program. This role partners closely with Finance, IT, Cloud Engineering, Internal Audit, and external auditors to ensure Internal Controls over Financial Reporting are properly designed, implemented, and operating effectively across both traditional and cloud environments.

This role serves as the primary lead for AWS scoping, risk assessment, and control evaluation. The ideal candidate brings deep SOX expertise along with hands-on experience in AWS environments and a strong understanding of cloud control frameworks and the shared responsibility model.

The Lead Analyst reports to the Director of SOX Governance, Risk & Compliance and regularly interfaces with senior management and the Audit Committee, providing clear insights into cloud risk, control effectiveness, and SOX program health.

Responsibilities

• Own the annual SOX compliance plan, including enterprise scoping, risk assessment, and management of the master testing calendar.
• Lead AWS scoping activities, including identification of in-scope accounts, services, integrations, and data flows impacting financial reporting.
• Evaluate and document AWS controls in alignment with the shared responsibility model and SOX requirements.
• Lead walkthroughs with process owners and technology teams to develop and maintain narratives, flowcharts, and risk control matrices.
• Execute and review testing of manual, automated, ITGC, and cloud-native controls, ensuring workpapers meet PCAOB standards.
• Assess design and operating effectiveness of AWS controls such as IAM, logging, monitoring, and configuration management.
• Partner with Cloud Engineering and Security teams to define and implement compliant control structures for AWS environments.
• Evaluate control deficiencies, perform root cause analysis, determine severity, and drive remediation efforts through closure.
• Develop and maintain dashboards and reporting to communicate SOX status, testing progress, and remediation trends to leadership and the Audit Committee.
• Administer the GRC platform, including workflows, evidence management, and continuous monitoring capabilities with AWS integrations.
• Coordinate with external auditors, align on testing strategies, and manage requests to ensure efficient audit execution.
• Advise control owners on control design, segregation of duties, and automation opportunities, including use of cloud-native capabilities.
• Maintain alignment of SOX controls with COSO, COBIT, and relevant cloud security frameworks.
• Lead SOX impact assessments for AWS implementations, cloud migrations, system changes, and M&A activities.
• Promote automation and continuous monitoring through integration with AWS services and analytics tools.
• Mentor junior team members and review deliverables to ensure consistency, quality, and scalability of the SOX program.

Qualifications

• Bachelor’s degree in Information Systems, Computer Science, Engineering, or a related field.
• 7+ years of SOX, internal audit, or Big 4 experience with strong exposure to ITGCs, automated controls, and cloud environments.
• Demonstrated experience leading SOX scoping and control evaluations in AWS or cloud-first organizations.
• AWS Certified Security – Specialty (SCS-C02) required.
• CPA, CIA, CISA, or similar certification strongly preferred.
• Deep knowledge of COSO framework, PCAOB standards, and ITGCs across on-prem and cloud environments.
• Hands-on experience with AWS services such as IAM, CloudTrail, Config, Security Hub, GuardDuty, and CloudWatch.
• Strong understanding of AWS shared responsibility model and cloud control design.
• Experience with cloud frameworks such as NIST, CIS AWS Foundations Benchmark, and COBIT.
• Familiarity with ERP and business platforms such as Workday, Salesforce, Zuora, and GitHub, including integrations with AWS.
• Proficiency with GRC tools such as Workiva or OneTrust and analytics tools such as Power BI, Tableau, or SQL.

Skills & Competencies

• Strong analytical and problem-solving capabilities with the ability to assess complex environments.
• Proven ability to manage multiple priorities and drive initiatives to completion.
• Excellent communication skills with experience presenting to senior leadership and audit committees.
• Ability to influence cross-functional stakeholders and drive accountability.
• Experience mentoring team members and maintaining high-quality standards across deliverables.
• High level of integrity and commitment to compliance and continuous improvement.