Operational SOX Tester

Role: Operational SOX Tester

Location: Toronto ON
Contract

Role Summary

Responsible for executing SOX 404 testing over Business Process (BP) and Entity-Level (EL) controls to support management certification and enable external auditor reliance SOX program. This role supports financial reporting integrity through testing of key process and governance controls.

Key Responsibilities

• Execute testing of Business Process (BP) controls across financial cycles (e.g. journal entries revenue procure-to-pay order-to-cash)
• Perform testing of Entity-Level (EL) controls including oversight governance and monitoring activities
• Conduct walkthroughs to validate process flows risk coverage and control design
• Evaluate control design and operating effectiveness in accordance with SOX 404 methodology
• Validate key reports reconciliations and management review controls supporting financial reporting
• Document walkthroughs test procedures and results in Workiva GRC
• Identify and document control issues including root cause and impact
• Support remediation tracking and retesting of control deficiencies
• Coordinate with Finance Internal Controls and business stakeholders to obtain evidence and clarify processes
• Support external audit reliance by preparing high-quality evidence-based documentation

KPIs / Performance Measures

• On-time Completion: Controls tested within SOX timelines
• Quality of Testing: Minimal rework from management
• Audit Reliance: Controls accepted for external audit reliance
• Issue Management: Timely identification and closure of deficiencies
• Documentation Compliance: Alignment with Workiva standards and SOX standards

Qualifications

• 2 5 years of experience in SOX internal controls or financial audit
• Strong understanding of SOX 404 requirements including BP and EL controls
• Knowledge of financial processes (GL AP AR revenue payroll)
• Strong documentation analytical and stakeholder coordination skills

Preferred

• CPA (or in progress)
• Experience with Workiva or GRC tools