Program Manager (SOX)

Job Description

Description:Have you mastered the balance between creativity and technology Do you want to be part of a company that is changing the way software is developed and used Salesforce is looking for candidates for the role of Program Manager to work on the Internal Audit-SOX Team within our high-growth company. The candidate must demonstrate strong initiative, ownership, passion as well as excellent management, teamwork, and problem-solving skills.The Program Manager is responsible for line of business support on complex Salesforce SOX Processes for Governance, risk and compliance (GRC) and also cater to managing organizations overall governance, enterprise risk management and compliance with regulations. The candidate should be able to think of GRC as a structured approach to aligning IT with business objectives, while effectively managing risk and meeting compliance requirements. The Program manager will be the primary process expert in their service area and will work in collaboration with the SOX team, business stakeholders, and other technology teams that impact their end to end business process area of expertise. The Job consists of working with the Compliance Manager to test the established internal controls over financial reporting for Salesforce.com. Testing will include Information Technology General Controls (i.e. testing controls over logical security, quarterly access reviews (QARs), physical security, change management, backups and recovery, and operations)Responsibilities:Understands all aspects of Salesforce configuration and technical/functional capabilities, including all changes and potential system implications related to SOX ProcessesProactively monitor services to identify issues.Maintains updated system documentation and Salesforce policies/proceduresActively transfers knowledge throughout organization, participates in knowledge sharing projects to develop best practices, leads knowledge sharing sessions, and mentors junior staff and new hiresMaintain and demonstrate 100% compliance with all written security policies, SOX procedures, and change management controls

• Plan and execute SOX testing and documentation activities with consistent quality
• To understand how the controls being tested serve to provide assurance regarding accurate financial reporting and make suggested changes to the control structures if appropriate.

Required Skills:

• 6-8 years of experience with a minimum 300-seat environment handling all aspects of CRM, case management and Compliance
• Take ownership for all assigned process areas, which includes obtaining a comprehensive understanding of all process activities and controls as well as related company policies and external accounting and reporting guidelines and act as a subject matter expert for each of these assigned process areas
• Work with business process owners to gain an understanding of the process, associated risks, and key controls to be tested
• Be aware of current developments in processes, internal policies and procedures, and external accounting and reporting guidance and critically challenge the purpose of procedures. Drive consistency in approach to recommend, where appropriate, adaptation to our audit methodology to ensure continuous improvement
• Experience and expertise in evaluating and testing IT General controls for system applications and the network environments, including active directory.
• Ability to articulate on work papers and orally how the control attributes were satisfied and if not the nature of the deficiency.
• Strong interpersonal relationship skills to work with control owners in a non-threatening manner, and yet without lowering the standards of what constitutes a control that is working as designed.
• Ability to size and aggregate control deficiencies according to the nature and significance of deficiencies found in testing controls.
• Ability to pursue multiple testing initiatives simultaneously such that a delay in one area does not halt overall progress.
• Ability to meet established testing deadlines.
• Ability to assist and work with the Compliance Manager in developing formal communications to the SOX Compliance Steering Committee.
• Experience in the software industry and in particular with revenue recognition principles unique to Software as a Service companies.
• Strong background in IT SOX, SOC and/or process improvement
• Knowledge/experience with key business processes in a cloud technology company
• Strong team player with service-oriented attitude and customer focus
• Familiarity with SOX protocols, Change Management and Release Management principles and processes
• The ability to quickly develop strong working relationships with internal departments, including those in international locations, business partners, internal and external auditors
• A willingness to challenge status quo and drive continuous improvement through change and new ideas
• The ability to effectively communicate (written and verbal) points-of-view, recommendations to key stakeholders and regularly to key stakeholders
• Strong project management skills and experience
• Big 4/public accounting/management consulting experience is preferred Strong analytical and decision-making skills
• Excellent organizational, communication and interpersonal skills
• Keep abreast of SEC, US GAAP, and other regulatory and technical guidance and regulations as it pertains to SOX and other related activities and perform applicable testing in line with standards for technically challenging areas (i.e. Revenue Recognition, Purchase Accounting, FX Hedging, etc.)
• Bachelors Degree in Computer Science or other related technical field

Desired Skills:

• Supporting certifications (e.g., CISA, CRISC, CISSP)
• Salesforce ADM 201 certification and knowledge is preferred.
• Masters degree in relevant business or technical discipline
• Strong understanding of business processes, financial audit, and financial and operational internal control methodologies and terminology (e.g. COSO), as well as the Sarbanes Oxley Act of 2002 and Audit Standard 5, including documentation and testing
• Good experience in SOX controls testing / Internal Financial Controls (IFC) testing which includes walkthrough, control design testing, operating effectiveness testing, and controls remediation testing.
• Proven technical understanding of financial accounting and Generally Accepted Accounting Principles (U.S. GAAP), and understanding of and ability to research and apply the guidance to changing control environment
• Expert in Microsoft Office Suite, G Suite, Visio and/or Lucidchart
• Excellent written and verbal communication skills to engage in the conversation
• Confidence/willingness to ask questions and raise issues/concerns in a timely manner
• Ability to build relationships, motivate people, instill accountability, and drive results
• Passion for the success of the Salesforce Ohana (colleagues, customers, and partners), Security GRC, and delivering innovative programs that reinforce Salesforces focus on Trust.

Accommodations - If you require assistance due to a disability applying for open positions please submit a request via this Accommodations Request Form.Posting StatementAt Salesforce we believe that the business of business is to improve the state of our world. Each of us has a responsibility to drive Equality in our communities and workplaces. We are committed to creating a workforce that reflects society through inclusive programs and initiatives such as equal pay, employee resource groups, inclusive benefits, and more. Learn more about Equality at Salesforce and explore our benefits.Salesforce.com and Salesforce.org are Equal Employment Opportunity and Affirmative Action Employers. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status. Salesforce.com and Salesforce.org do not accept unsolicited headhunter and agency resumes. Salesforce.com and Salesforce.org will not pay any third-party agency or company that does not have a signed agreement with Salesfore.com or Salesforce.org.Salesforce welcomes all.,

Keyskills :
managementagileenterprise risk managementproject managementit general controlsdeliveryprogram managementsoftware as a servicegenerally accepted accounting principlesequal employment opportunity