Seadrill

IT SOX & ITGC Compliance Lead 90150

Seadrill  •  Houston, TX (Onsite)  •  21 hours ago
Apply
AI can make mistakes so check important info. Chat history is never stored.

Job Description

The IT SOX & ITGC Compliance Lead leads the day-to-day execution and coordination of Seadrill's IT general controls (ITGC) activities for systems relevant to Sarbanes-Oxley (SOX) compliance. This hands-on senior role works directly with control owners, managed service providers, Internal Controls and auditors to maintain reliable control execution, complete audit evidence and timely remediation throughout the year.

The role coordinates ISIT's contribution to the SOX audit cycle and helps control owners address findings. Independent controls testing remains with Internal Audit or its appointed testing team. The Lead recommends changes to the Risk and Control Matrix (RACM) but does not own or maintain it.

  • Coordinate the design, documentation, execution and monitoring of IT general controls across access management, change management, IT operations and the software development life cycle for SOX-relevant systems, including Oracle Fusion Cloud ERP and EPM and supporting infrastructure.
  • Recommend updates to IT control descriptions, scope, key/non-key designations and financial reporting risk mappings for consideration by the RACM owner.
  • Coordinate IT audit walkthroughs, prepared-by-client requests, evidence production and responses to auditor inquiries. Support sample requests and independent testing with accurate, complete and timely evidence.
  • Review audit evidence for completeness and quality before submission, and work with control owners and service providers to resolve gaps. This operational review does not replace independent controls testing.
  • Facilitate IT remediation by coordinating root-cause analysis, action plans and agreed milestones with accountable owners; track actions through closure and escalate delays or unresolved risks to ISIT leadership. Agree milestones with accountable control owners and escalate unresolved cross-functional dependencies through ISIT leadership.
  • Coordinate user access reviews, provisioning and deprovisioning controls, privileged access oversight and segregation-of-duties analysis with the responsible control owners.
  • Oversee change-control execution and supporting records, including approvals, testing evidence and emergency changes.
  • Monitor controls over batch jobs, interfaces and integrations that support financial reporting.
  • Coordinate review of service-provider control reports, including SOC 1 and SOC 2 reports, and coordinate execution and evidence for complementary user entity controls.
  • Hold managed service providers accountable for control execution and evidence quality under their service agreements.
  • Partner with Internal Controls on control design, independent testing results and reporting inputs. Prepare clear status reports and heat maps for ISIT leadership; provide Audit & Risk Committee reporting inputs through the Director of IT and Head of Internal Audit & Enterprise Risk Management.
  • Embed controls into system implementations and changes, and improve compliance activities through automation, standardized evidence and simpler control design.
  • Help control owners and service providers understand audit requirements, control responsibilities and evidence expectations.

Experience & Competencies

  • 7+ years of experience in IT audit, ITGC or SOX compliance, including at least 3 years in a lead or senior role.
  • Hands-on SOX 404 experience at a publicly listed company, in industry or Big 4/advisory.
  • Strong working knowledge of ITGC domains, COSO and COBIT.
  • Experience with cloud ERP control environments; Oracle Fusion experience strongly preferred.
  • Solid understanding of segregation of duties, privileged access management and identity governance.
  • Ability to manage external auditor relationships and work through scoping and evidence expectations with the relevant control and assurance owners.
  • Experience working with offshore or outsourced managed service teams.
  • Clear communication and stakeholder-management skills, with the ability to explain control issues to technical teams and finance leaders.

What success looks like in 1 year

  • A well-documented ITGC control set, with remediation that addresses root causes and reduces repeat deficiencies.
  • Predictable audit cycles, with complete evidence available ahead of requests.
  • Control owners and service providers who understand their responsibilities and consistently meet control and evidence expectations.

Desired

  • Bachelor's degree in Information Systems, Accounting, Computer Science or a related field.

Preferred

  • CRISC, CISSP or CPA certification.
  • Experience with GRC or ITSM tools such as ServiceNow GRC, AuditBoard or similar platforms.
  • Experience in energy, oil and gas or another asset-intensive industry.
  • Experience supporting multinational companies.

SAFETY AT SEADRILL

Our goal is to ensure that ‘nobody gets hurt' whilst performing their job. Everyone at Seadrill has a part to play in meeting our safety commitment.

Through strong leadership and personal responsibility from all employees, we take a systematic approach to identifying, managing and preventing the hazards involved in our day to day operations.

Nothing is more important to us than the health, safety and security of our workforce and the communities in which we operate and behaving responsibly towards our shared environment.

We are vigilant, disciplined and always looking out for one another. We have developed and embedded a strong safety culture onshore and offshore, fostered by all employees, who each have a personal responsibility and the authority to put an immediate stop to the job if they believe it to be unsafe.

Everyone at Seadrill is accountable for helping to build this culture of care. This includes:

  • Compliance with the Seadrill Code of Conduct and Fight Against Corruption.
  • Compliance with applicable internal and external governing requirements.
  • Non-compliances are promptly acted on and reported to the direct supervisor.
  • The standard for tidiness and cleanness is adhered to.
  • Good and clear communications with all involved parties.

SEADRILL BEHAVIORAL FRAMEWORK

In Seadrill, setting the standard is not just about what we deliver, but how we deliver it. We co-created our Behavioral Framework with our employees, where we identified four key competencies that define our culture and help us to live our values. Our behaviors are embedded in the way we work and support and guide us day to day:

  • Drive & Ownership
  • Change & Forward Thinking
  • Communication & Collaboration
  • Service Delivery

DIVERSITY

This position is also for people with disabilities.

We recognize that our people are key to helping us to achieve our vision, so we have fostered a culture that encourages, supports and celebrates diversity of all kinds. It fuels our innovation and connects us closer to our customers and the communities we operate in.

JOIN SEADRILL

We value our people and want to retain them. So, we offer a competitive package built around an attractive base salary and a range of benefits tailored to your location.

Join Seadrill. Own the Opportunity.

Seadrill

About Seadrill

Seadrill is setting the standard in deepwater oil and gas drilling. With its modern fleet, experienced crews, and advanced technologies, Seadrill safely, efficiently, and responsibly unlocks oil and gas resources for national, integrated, and independent oil companies.

Seadrill Social Media Community Guidelines:

At Seadrill, we believe in fostering an inclusive and respectful community where everyone feels welcome to engage and share their thoughts. To ensure a positive and constructive experience for all, we kindly ask our community members to adhere to the following guidelines:

1. Respectful Dialogue: Treat others with kindness, empathy, and respect. Engage in constructive commentary and avoid personal attacks, derogatory language, or offensive comments. Let's create a space where diversity is championed through mutual respect.

2. No Hate Speech: Hateful, discriminatory, or offensive language targeting individuals or groups based on their race, ethnicity, gender, religion, sexual orientation, or any other characteristic is strictly prohibited. We are committed to fostering an inclusive environment both in the workplace and on our social channels.

3. Stay on Topic: When commenting on our posts, please ensure that your contributions are relevant to the topic at hand. Off-topic or spam comments may be removed to maintain the clarity and focus of the discussion.

4. Protect Privacy: Refrain from sharing personal or confidential information about others, including their contact details, without their consent. Respecting privacy is vital for maintaining a safe and trustworthy community.

5. Intellectual Property: Respect copyright laws and give proper credit when sharing content that belongs to others. Plagiarism or unauthorized use of copyrighted material is not acceptable.

Seadrill reserves the right to delete comments or block users who violate these guidelines. We are committed to fostering an environment where everyone feels valued and heard.

Industry
Oil, Gas & Mining
Company Size
5,001-10,000 employees
Headquarters
Houston
Year Founded
2005
Social Media