Director, SOX Compliance

Director of SOX Compliance

Our client, a rapidly scaling, publicly traded technology company serving the defense and national security market, is looking for a Director of SOX Compliance to design, implement, and run its program of internal controls over financial reporting (ICFR) under Sarbanes-Oxley Section 404. As the business grows and integrates acquisitions, this role is central to building an audit-ready controls framework that keeps pace with both public-company obligations and operational expansionThe Director will work closely with finance, accounting, IT, operations, legal, external auditors, and outside service providers to make sure financial reporting risks are identified and covered by controls that are well-designed, operating effectively, and applied consistently across every entity.

Location: Herndon, VA, Remote Fridays

Compensation: $170,000 - $230,000 plus annual bonus and equity

What you'll do

• Own the SOX compliance program end to end — strategy, annual ICFR roadmap, and ongoing execution and enhancement.
  
• Lead scoping, risk assessments, process mapping, and evaluations of control design.
  
• Build and maintain process narratives, risk and control matrices, and flowcharts across all financial reporting areas.
  
• Coordinate walkthroughs with process owners and run the quarterly and annual testing cycles, managing third-party testing providers and keeping the program aligned with the external auditor's ICFR procedures.
  
• Serve as the go-to contact for evidence requests, issue resolution, and status reporting.
  
• Spot control gaps and design new or improved controls across core processes — order-to-cash, procure-to-pay, payroll, financial close, and treasury.
  
• Drive remediation of identified deficiencies and track management action plans through to closure.
  
• Advise on control design for new processes stemming from ERP implementations, system migrations, acquisitions, and other change.
  
• Build phased roadmaps for bringing acquired entities into SOX scope and lead the ICFR integration work so controls are designed and operating before full inclusion.
  
• Partner with IT and system owners to strengthen ITGCs, application and automated controls, and system governance.
  
• Support integration of cybersecurity-related controls, with sound access management and change management practices.
  
• Help assess and implement controls around AI-enabled financial systems, model governance, and data integrity.
  
• Develop internal controls supporting ESG reporting, including climate disclosures and sustainability metrics.
  
• Stay ahead of regulatory changes and adjust the control environment proactively.
  
• Create and deliver SOX training for control owners across finance, operations, IT, and program management, building a controls-conscious culture fitting a public company and government contractor.
  
• Keep making the program more efficient and effective, applying technology and risk-based approaches where they add value.
  
• Prepare SOX status updates for senior leadership and the Audit Committee, including dashboards and analytics-driven reporting.
  

Requirements

What you bring

• Bachelor's degree in Accounting, Finance, Business Administration, or a related field; CPA, CIA, or CISA preferred.
  
• 10+ years across SOX, internal audit, ICFR, or public accounting, with leadership experience.
  
• Experience owning or managing SOX programs at public companies — or companies preparing to become SOX-compliant.
  
• Deep knowledge of SEC and PCAOB regulations, PCAOB auditing standards, the COSO framework, and SOX 404 requirements.
  
• Hands-on expertise in ICFR frameworks, internal controls, and risk assessment.
  
• Experience with automated controls, ITGCs, cloud environments, and cybersecurity-aligned controls; familiarity with AI governance risks and emerging controls for automated financial systems.
  
• Proficiency with SOX, audit, and GRC software; ERP experience (Costpoint preferred).
  
• A record of building enhanced reporting, dashboards, or metrics for senior leadership and the Audit Committee.
  
• Strong writing skills for control documentation, remediation plans, and board materials, plus the ability to distill complexity into actionable insight for executives.
  
• Sharp analytical, organizational, and project management skills, with meticulous attention to detail and a continuous-improvement mindset.
  
• The ability to manage competing priorities, hit tight deadlines, and collaborate well across departments.
  
• High integrity and sound judgment suited to a regulated, national security setting.
  

Nice to have

• Experience at a newly public company or transitioning acquired entities into SOX compliance.
  
• Big 4 or national firm background auditing publicly traded companies.
  
• Experience implementing automated workflows, GRC tools, or scalable internal control systems.
  
• Background in defense, national security, government contracting, aerospace, or technology.
  
• Working knowledge of FAR, CAS, indirect rate structures, and cost-reimbursable contract accounting.
  
• Exposure to ESG reporting, sustainability metrics, and related control frameworks.