Manager, Internal Audit

*This job description reflects management's assignment of essential functions; it does not prescribe or restrict the tasks that may be assigned.

Position Responsibilities and Duties:

SOX 404 Compliance

• Coordinate the end-to-end execution of the SOX 404 compliance program covering internal control over financial reporting (ICFR), including control design and operating effectiveness testing, ensuring the program is delivered on schedule.

• Support the annual SOX risk assessment and scoping, including identifying significant accounts and disclosures, relevant assertions, in-scope locations/business units, and materiality thresholds used to determine key controls.

• Stay informed of planned and implemented changes to processes, systems, personnel, and the control environment; proactively assess their impact on the SOX control set, scope, and testing approach; and communicate implications to management, the Internal Controls function and external auditors.

• Support independent validation, through walkthroughs and inquiry, that the control and process documentation maintained by Management and the Internal Controls function (including process narratives, flowcharts, and risk-and-control matrices (RCMs)) accurately reflects the design of key controls. Communicate identified gaps and recommended improvements.

• Partner and coordinate closely with the Internal Controls function throughout the SOX program — aligning on the control set, testing timing, results, and deficiency evaluation, and ensuring hand-offs on documentation updates and remediation — while maintaining internal audit’s independence and objectivity.

• Support the identification, documentation, and evaluation of control deficiencies; assess severity individually and in the aggregate (deficiency, significant deficiency, or material weakness).

• Track and validate remediation of identified control gaps and deficiencies, including re-testing remediated controls and monitoring management action plans to closure.

• Support management’s annual assessment and certification of ICFR under SOX Section 404(a) and the related quarterly disclosure controls and Section 302 certification process.

• Coordinate with external auditors to align SOX scope, testing approach, and timing, and to enable their reliance on internal audit’s work.

• Drive continuous improvement of the SOX program, including rationalizing and optimizing the control set and leveraging automation, data analytics, and Workiva.

• Support the development of periodic SOX status reporting for senior management and the audit committee, including program progress against key milestones, testing results, and the status of identified deficiencies and related remediation.

General Internal Audit

• Understand, document, and assess processes, procedures and internal controls to identify financial, operational and compliance risks and improvement opportunities.

• Develop detailed audit programs and testing procedures relevant to risk and control objectives.

• Plan and execute internal audit projects in alignment with the annual audit plan timely and effectively.

• Prepare clear, concise and accurate audit work papers and reports that support audit findings, conclusions and recommendations.

• Assist in the facilitation of the company’s risk assessment and contribute to the development of the annual audit plan.

• Collaborate and coordinate with third-party service providers on co-sourced audit and SOX engagements.

• Communicate audit and SOX testing results and recommendations to management and collaborate with cross-functional teams to ensure timely remediation efforts.

• Maintain up-to-date knowledge of IIA standards, PCAOB guidelines, SEC and SOX requirements, and best practices in internal auditing.

• Manage internal audit staff and co-source resources, as applicable.

• Foster strong relationships across departments to promote a culture of risk awareness, control ownership, and continuous improvement.

• 5 - 8 years of internal audit and SOX compliance experience, preferably in a Big 4 public accounting firm and/or a public company.

• Experience in publicly traded construction, engineering, infrastructure or project-based industries strongly preferred.

• Experience in a newly public or high-growth company environment a plus.

• Bachelor’s degree required in accounting, finance, business or a related field.

• Professional certification relative to the practice of internal audit required (e.g., CPA, CIA, CFE, CISA).

• Demonstrated hands-on experience managing or executing a SOX 404 ICFR program end-to-end, including scoping, risk assessment, documentation, walkthroughs, testing, and deficiency evaluation.

• Strong understanding of SOX 404 and internal control requirements, COSO framework, Generally Accepted Accounting Principles, business processes, and SEC reporting requirements.

• Working knowledge of IT general controls (ITGCs), including access to programs and data, change management, and IT operations, and the ability to assess their impact on automated controls and key reports.

• Strong experience with risk-based auditing.

• A self-starter who thrives in a dynamic, evolving environment, comfortable navigating ambiguity and consistently focused on finding practical solutions.

• Ability to work effectively with representatives from across the organization.

• Excellent analytical, problem-solving, and project management skills.

• Strong written and verbal communication skills, with the ability to present findings to various levels of management.

• Ability to manage multiple projects and meet deadlines in a fast-paced environment.

• High level of integrity and ability to handle confidential information.

• Demonstrated attention to detail.

• Ability to travel as needed.

• Highly proficient with Microsoft Office applications and audit / SOX tools, including Workiva.

• Experience with data analytics tools preferred.

Applicants must be legally authorized to work in the U.S. without requiring employer sponsorship now or in the future.