Sr. Manager SOX IT Controls

Senior Manager of IT General Controls

The Enterprise Reporting Controls & Governance Group is responsible for Comerica's compliance with the provisions of Section 404 of The Sarbanes-Oxley Act of 2002 ("SOX"), and ultimately, providing certification that our internal control environment is operating effectively. The group reports administratively to the Chief Accounting Officer and works closely with key stakeholders across business units, corporate functions, technology, and the second and third lines of defense.

The Senior Manager, ITis responsible for the management and execution of IT-related components of the SOX Program Office, including key IT-related risk assessments, IT general controls, IT application and interface controls, and assessing the impact to business processes of the overall IT environment.

Position Responsibilities:

• Lead the transformation of the Enterprise Controls & Governance group and play a critical role in the refinement of the IT-related components of the SOX Program Office.
• Act as a change manager for continual improvement of the internal control environment.
• Assist in the strategic direction of the group, including SOX IT program methodology, policies, templates, and procedures and provide recommendations for changes.
• Facilitate the planning, risk assessment and scoping activities for IT processes, including assessment of recent systems implementation that may impact the design and/or operating effectiveness of internal controls
• Lead walkthrough processes and collaborate with IT partners to identify areas where control enhancements and/or documentation improvements are needed (both process narratives and data flow diagrams).
• Oversee coordination between internal team members, internal and external auditors, and system/control owners to ensure cohesive and collaborative execution.
• Review testing approach and align expectations with external auditors to ensure documentation and testing complies with industry standards (including PCAOB) and allows for reliance by the external auditors.
• Review SOX testing for key general IT controls (ITGCs), IT application controls (ITACs), critical interfaces, and key reports/spreadsheets.
• Review SOC 1 report evaluations to ensure exceptions are appropriately addressed and that appropriate complementary controls are in place and operating effectively.
• Maintain a high level of visibility across the organization with various levels of Management and serve as a key point of contact with the CIO Group.

Job Specific Knowledge/Skills:

• Professional certification including CISA, CIA and/or CPA required
• Demonstrated ability to apply IT-related knowledge and experience in solving compliance issues
• Deep understanding of risk management methodologies, frameworks, and principles (e.g., SOX, COBIT) to evaluate and recommend optimal approaches to mitigating risk
• Strong knowledge of technology environments, including information security, infrastructure, data and software development (Windows, UNIX, SQL server/ Oracle database, Workday, etc.)
• Experience managing a team consisting of internal and outsources resources, including reinforcing performance in others, and facilitating their skill development
• Proficiency with Microsoft Office including Access, VISIO

Qualifications:

• Bachelor's Degree OR 4 years of relevant experience
• 7 years of experience in public accounting or large company IT audit, IT risk consulting and/or leading SOX program support/execution, Big 4 preferred
• 1 year of experience with Microsoft Office applications
• Required CIA certification (Certified Internal Auditor)
• Required CPA certification (Certified Public Accountant)

17 Cowboys Way
8:00am - 5:00pm Monday - Friday