What You'll Do
As a SOX & Internal Controls Tester, you'll test the execution of key controls over financial reporting (KCFRs) and other internal or secondary controls. The role includes design, development and execution of comprehensive test plans to verify the functionality, reliability, and compliance of the acquisition control environment.
The role also supports the development and maturity of business controls frameworks, ISO accreditation readiness, and internal audit alignment, ensuring a robust governance, risk, and compliance environment.
Your work may include:
- Develop and maintain detailed test plans and test cases aligned to SOX compliance requirements
- Execute manual and structured testing to identify defects/gaps against SOX standards
- Perform walkthroughs and assess control design and operating effectiveness
- Document and report defects with clear reproduction steps and track through to remediation
- Provide status updates and test metrics to acquisition & M&A stakeholders and IBM FBC
- Continuously improve testing processes to enhance SOX effectiveness and efficiency
- Stay current with IBM SOX requirements applicable to IBM Consulting
- Act as a trusted advisor on SOX best practices, including secondary controls
- Support the implementation and enhancement of business control frameworks beyond financial controls (e.g. operational, IT, procurement controls)
- Assist in risk identification, control mapping, and gap analysis across business processes
- Drive consistency and standardisation of controls aligned to IBM and acquisition governance frameworks
- Support the acquisition in achieving and maintaining ISO certifications (e.g. ISO 9001 Quality Management, ISO 27001 Information Security, ISO 22301 Business Continuity)
- Assist with documentation, control mapping, and evidence gathering for ISO audits
- Align SOX and business controls with ISO control frameworks where possible (integrated assurance approach)
- Participate in internal and external ISO audit preparation activities
- Help embed continuous improvement practices in line with ISO standards
- Support internal audit activities, including audit planning, fieldwork preparation, and evidence provision
What We're Looking For
We value people who take ownership, think critically, and enjoy working as part of a collaborative team tackling complex challenges. You don't need to tick every box, but we're particularly interested in people with skills/experience in:
- Strong analytical, problem-solving and communication skills
- Ability to work independently and collaborate across cross functional teams
- Detail oriented with strong documentation and compliance focus
- Understanding of SOX/internal controls frameworks and principles
- Awareness or experience with ISO standards and audit processes (desirable)
- Proficiency in Excel & Word
- Understanding of consulting and project management best practices
Benefits
We offer competitive salaries and a package that supports your wellbeing and development, including 25 days annual leave + bank holidays, free Private Medical cover and Life Assurance, generous pension (10% employer, 5% employee contribution), bonus and professional development and training support. In addition to secure parking, gym, café & restaurant on site and lots of open break out spaces.
Security Clearance
Due to the secure nature of the position and working environment, you must have or be eligible to obtain Security Clearance. More details relating to UK Security Clearance can be found here: United Kingdom Security Vetting: clearance levels - GOV.UK ()