3M has a long-standing reputation as a company committed to innovation. We provide the freedom to explore and encourage curiosity and creativity. We gain new insight from diverse thinking, and take risks on new ideas. Here, you can apply your talent in bold ways that matter.

Job Description

ITGC SOX Lead

As a member of IT GRC, you will play a key role in maintaining 3M’s SOX compliance.  It will challenge you to quickly learn new technologies and processes, cultivate partnerships across the organization, critically think through risks and controls, assess effectiveness of those controls, and influence others to take action. Core responsibilities of this job are described within this job description.  Job duties may change at any time due to business needs. 

Key Responsibilities:

• SOX ITGC Compliance:
  • Conduct controls rationalization for IT assets to identify areas of non-compliance.
  • Support the design of SOX IT controls and application controls.
  • Assist control owners with the documentation of SOX IT controls related to systems and processes.
  • Assist control owners in ensuring control deficiencies have been remediated.
• Policies, Standards and Procedure Development:
  • Contribute to the development and maintenance IT policies, standards, procedures, and control matrices to support SOX compliance.
  • Provide support and training to IT and business units on SOX IT control requirements and best practices.
• Documentation and Reporting:
  • Track the progress of SOX IT control execution and testing results.
  • Support monitoring the status of SOX IT compliance efforts and identified control deficiencies.
  • Support tracking of the remediation efforts for control deficiencies and ensure timely resolution.
• Collaboration and Coordination:
  • Collaborate with the control owners to support the implementation of effective SOX IT controls across relevant IT assets.
  • Assist in coordination with internal audit and external auditors to facilitate SOX IT testing.
  • Support facilitation between IT, business, and external auditors to ensure clear communication and effective audit coordination.
• Continuous Improvement:
  • Support control owners to enhance SOX IT control and processes while ensuring risks are mitigated.

Qualifications:

• Education:
  • Bachelor’s degree in Information Technology, Computer Science, Accounting, or a related field.
  • Advanced degree or professional certifications (e.g., CISA, CISSP, CRISC) preferred.
• Experience:
  • Minimum of 7 years of experience in IT audit, IT compliance, or a related field with a focus on SOX compliance.
  • In-depth knowledge and experience in SOX programs and application of ITGC and IT application controls.
  • Experience using the GRC tool preferred, such as, Archer, Workiva, Audit Board.
• Skills:
  • Strong understanding of ITGC frameworks and best practices (e.g., COSO, COBIT, ITIL).
  • Excellent analytical, problem-solving, and project management skills.
  • Strong communication and interpersonal skills, with the ability to work effectively with technical and non-technical stakeholders.
  • Proficiency in IT auditing tools and technologies used for control monitoring and assessment.
  • Ability to navigate ambiguity and develop trusted business relationships.
  • Ability to identify problems, analyze data and present conclusions.
  • Ability to lead down, across, and up, in order to influence desired outcomes.

Learn more about 3M’s creative solutions to the world’s problems at www.3M.com or on Twitter @3M.

3M Global Terms of Use and Privacy Statement

Carefully read these Terms of Use before using this website. Your access to and use of this website and application for a job at 3M are conditioned on your acceptance and compliance with these terms.

Please click on the following links and select the country where you are applying for employment to review the applicable Terms of Use (link here) and Privacy Policy (link here). Before submitting your application, you will be asked to confirm your agreement with the terms.