I&O SOX Control Operator

Ampcus Incorporated

Richmond, VA

JOB DETAILS
SKILLS
Accounting, Auditing, Automation, Business Services, Change Control, Communication Skills, Computer Science, Consulting, Continuous Improvement, Detail Oriented, Document Management, Documentation, Documentation Standards, External Audit, Finance, Identify Issues, Information Technology & Information Systems, Information Technology/Systems Audit, Internal Audit, Machine Tool, Microsoft Access Database, Microsoft Product Family, Microsoft SharePoint, Operations Control, Presentation/Verbal Skills, Procedure Development, Reporting Skills, Risk, Risk Management, Root Cause Analysis, Sarbanes-Oxley Act (SOX), Standard Operating Procedures (SOP), Time Management, Traceability, Writing Skills
LOCATION
Richmond, VA
POSTED
14 days ago

Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.

Job Title: I&O SOX Control Operator
Job Location: Richmond, VA

Job Descripton: 

The SOX Control Operator works closely with Control Owners, IT Risk Management (ITRM), internal audit, and external auditors to support walkthroughs, testing, and remediation activities. This role does not own control design, but is accountable for day-to-day control operation and evidence quality.

Key Responsibilities

  • Control Execution
    • Execute assigned SOX IT controls (e.g., access reviews, privileged access, termination reviews, configuration and monitoring controls) in accordance with approved control descriptions, frequencies, and procedures.
    • Perform control activities on required cadences (weekly, monthly, quarterly), ensuring completeness and accuracy of execution.
    • Follow documented SOPs and control narratives precisely; identify gaps or ambiguities in procedures and escalate as needed.
  • Evidence Collection & Management
    • Collect, validate, and retain control evidence that meets audit standards for completeness, accuracy, and timeliness.
    • Ensure evidence clearly demonstrates who performed the control, when it was performed, what was reviewed, and what conclusions were reached.
    • Upload and manage artifacts in designated repositories and GRC tools (e.g., AuditBoard, SharePoint) in alignment with documented processes.
    • Perform quality checks on generated reports, system outputs, and supporting files prior to submission.
  • Issue Identification & Escalation
    • Identify execution issues, missing inputs, late dependencies, or anomalies during control operation.
    • Escalate execution risks, potential deficiencies, or missed control deadlines to the Control Owner in a timely manner.
    • Support Control Owners during deficiency investigation, root cause analysis, and remediation validation.
  • Audit & Compliance Support
    • Support internal and external audit activities, including walkthroughs, inquiries, and evidence requests.
    • Respond to auditor questions related to control execution, evidence generation, and operational steps (not control design decisions).
    • Maintain clear traceability between control descriptions, execution steps, and supporting evidence.
  • Continuous Improvement & Automation Support
    • Identify opportunities to improve control execution efficiency, standardization, and automation.
    • Participate in automation initiatives (e.g., scheduled jobs, Power Automate workflows, standardized reporting) to reduce manual effort and execution risk.
    • Provide feedback on SOP updates, control rationalization efforts, and tooling improvements.

Required Qualifications

  • Bachelor’s degree in Information Systems, Accounting, Finance, Computer Science, or equivalent experience.
  • Experience executing SOX IT controls or operational controls in a regulated environment.
  • Working knowledge of SOX concepts, IT General Controls (ITGCs), and audit evidence requirements.
  • Experience handling control evidence, documentation standards, and audit requests.
  • Strong attention to detail and ability to follow defined procedures without deviation.
  • Competencies in Microsoft O365 (Advanced Excel is a must).
  • Strong Written and Verbal Communication Skills, and Presentation Skills.

Preferred Qualifications

  • Experience supporting SOX controls in IT Operations domains (e.g., databases, infrastructure, access management, monitoring).
  • Familiarity with GRC tools such as AuditBoard and enterprise document repositories.
  • Experience with automated or semi-automated control execution and reporting.
  • Prior interaction with internal audit, external auditors, or IT Risk Management teams.

Key Skills & Competencies

  • Control execution discipline and documentation rigor.
  • Evidence quality and audit readiness.
  • Risk awareness and escalation judgment.
  • Time management across multiple control cadences.
  • Clear written and verbal communication.
  • Process adherence with continuous improvement mindset.
 

Ampcus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veterans or individuals with disabilities.

About the Company

A

Ampcus Incorporated

Ampcus Inc is a global technology and business consulting firm specializing in Digital Transforrmation, Big Data, Analytics, Cyber Security, Testing, IV&V, Infrastructure Management and Enterprise Solutions. Ampcus Inc is an SBA 8(a) certified Women and Minority Owned global Provider of broad range of consulting Services. From strategy to execution, our disciplined yet flexible approach starts and ends with our clients. By listening hard and working harder, their goals become our goals. We are an ISO 9000, ISO 20000, ISO 27000 and CMMi Level certified company.

Ampcus consultants have significant business, engineering and technology experience. Our consultants have over 20 years of business experience and an average of over 10 years of engineering and technology experience. This means that the project teams understand how systems work and how the technology impacts the business processes of organizations.

We believe that success of an engagement is determined by strong project management, clear communication and mutual commitment working collaboratively. Our methodology begins by listening to the customer needs, then working with their teams to gain a clear understanding of the requirements, while providing a knowledge transfer of best practices for the organization. As a recognized leader providing customized software services, management and engineering solutions to companies around the world, our ability to deliver is a "granted"​ that makes companies put their trust in us to answer their day-to-day business challenges and put them on a path for greater success. We are the choice for our clients because we look at our clients business from a growth perspective.

Industry: Information Technology and Services

Specialties: Digital Transformation, Big Data and Analytics, Infrastructure Management Services, Testing and IV&V, Cyber Security, Active Directory and E-mail Infrastructure, Project Management, Training, and ERP, CRM. EAI, BI

COMPANY SIZE
500 to 999 employees
INDUSTRY
Staffing/Employment Agencies
WEBSITE
http://www.ampcus.com