Penumbrainc Opportunities

General Summary The IT SOX Compliance Senior Manager plays a critical role in ensuring that the Company’s IT environment maintains strong internal controls. This role is responsible for strategic leadership and oversight of the IT SOX compliance program as well as partnering with cross functional teams to mitigate risks. This position requires working onsite in Alameda, California 80% of the time.

Specific Duties and Responsibilities • Responsible for strategic leadership, oversight, and day-to-day management of the IT SOX compliance program. * • Oversee IT risk assessment and scoping process to ensure alignment with financial reporting risks. * • Review control documentation and collaborate with control owners to ensure execution of processes and documentation are adequate. • Partner with internal audit, external audit, and control owners to coordinate ITGC and ITAC control testing and timely resolution of control related matters. * • Support new systems implementations and technology changes to ensure SOX requirements are incorporated. * • Provide training and guidance to IT control owners on SOX expectations, documentation standards, and audit readiness. * • Identify opportunities to improve the sox program through automation, metrics, tools, and process improvements. * • Adhere to the Company’s Quality Management System (QMS) as well as domestic and global quality system regulations, standards, and procedures. * • Understand relevant security, privacy, and compliance principles and adhere to the regulations, standards, and procedures that are applicable to the Company. * • Ensure other members of the department follow the QMS, regulations, standards, and procedures. * • Perform other work-related duties as assigned. *Indicates an essential function of the role

Position Qualifications Minimum education and experience: • Bachelor’s degree in accounting or information systems, with 8+ years' experience in IT SOX compliance, Information Security or IT Risk Management, or an equivalent combination of education and experience. Preferred Qualifications: • CISA, CIA, or CPA certification is strongly preferred • Deep knowledge of SOX 404, ITGCs, ITACs, and COSO-based internal control frameworks • Expertise in SAP environments, including knowledge of SAP Security and Basis • Experience evaluating technology risk within a Big 4 public accounting firm preferred • Experience implementing or managing GRC platforms • Technical understanding of IT operations including cloud security architectures, DevOps practices, and complex logical access management • Strong oral, written and interpersonal communication skills • High degree of accuracy, attention to detail and strong problem-solving skills

Working Conditions • General office environment • Willingness and ability to work on site in Alameda, CA. • May have business travel from 0-5% • Requires some lifting and moving of up to 25 pounds • Must be able to move between buildings and floors • Must be able to remain stationary and use a computer or other standard office equipment, such as a printer or copy machine, for an extensive period of time each day • Must be able to read, prepare emails, and produce documents and spreadsheets • Must be able to move within the office and access file cabinets or supplies, as needed • Must be able to communicate and exchange accurate information with employees at all levels on a daily basis

Annual Base Salary Range: $165,000 - $230,000 We offer a competitive compensation package plus a benefits and equity program, when
applicable. Individual total compensation will vary based on factors such as qualifications, skill level, competencies, and work location.