Wise is a global technology company, building the best way to move and manage the world’s money.
Min fees. Max ease. Full speed.
Whether people and businesses are sending money to another country, spending abroad, or making and receiving international payments, Wise is on a mission to make their lives easier and save them money.
As part of our team, you will be helping us create an entirely new network for the world's money.
For everyone, everywhere.
More about our mission and what we offer.
Job DescriptionWe are looking for an IT SOX expert to join our mission and help us build a global platform that’s scalable, reliable, and secure. The Security Controls team plays a vital role in safeguarding Wise’s complex IT landscape. We specialise in the comprehensive testing, assessment, and continuous improvement of technology-related controls. This role will require you to drive scope rationalization, dependency mapping, and control optimization.
Your Mission
Scope Rationalization & Optimization: Analyze and challenge existing IT SOX scope across applications and infrastructure. Identify duplicate, redundant, or over-engineered ITGCs/ITACs and propose enhancements.
New System Onboarding: Establish RACMs (Risk and Control Matrices) and identify necessary ITGCs and ITACs for newly in-scope SOX applications and platforms.
Dependency & System Mapping: Document and maintain end-to-end dependency maps (upstream/downstream data flows, infrastructure ties, and automated interfaces) for management review.
Controls Testing: Where needed, support control testing (Design & Operating Effectiveness) across our cloud infrastructure and SaaS landscape.
Stakeholder Management: Partner with key stakeholders across Finance, Risk, Security, Platform to effectively communicate SOX 404 requirements and expectations.
A bit about you:
SOX Experience: You have 3+ years of experience in Technology Risk or IT Audit, with a dedicated focus on SOX. You possess deep knowledge of SOX 404 requirements, COSO framework, and IT control frameworks (NIST, ISO27001).
SOX Implementation: You have demonstrable experience with first-time SOX audits in cloud-native environments. You understand how compliance frameworks map to dynamic infrastructures.
Cloud-Native Mindset: You understand how Change Management works in a CI/CD pipeline and how Access Management works in a microservices architecture. Experience with AWS, Terraform, GitHub, Jira, Okta, and SailPoint is preferred.
Scope & RACM Quality: You know what a good RACM looks like and can look at a system architecture diagram or control framework and spot where coverage is either missing or excessively duplicative.
Clear Communicator: You can translate technical architecture details into audit-ready documentation while explaining compliance "whys" clearly to engineers.
For everyone, everywhere. We're people building money without borders — without judgement or prejudice, too. We believe teams are strongest when they are diverse, equitable and inclusive.
We're proud to have a truly international team, and we celebrate our differences.
Inclusive teams help us live our values and make sure every Wiser feels respected, empowered to contribute towards our mission and able to progress in their careers.
If you want to find out more about what it's like to work at Wise visit Wise.Jobs.
Keep up to date with life at Wise by following us on LinkedIn and Instagram.
Skills Required
- 3+ years of experience in Technology Risk or IT Audit with dedicated SOX experience
- Deep knowledge of SOX 404 requirements
- Knowledge of the COSO framework
- Knowledge of IT control frameworks including NIST and ISO 27001
- Experience with first-time SOX audits in cloud-native environments
- Understanding of change management in CI/CD pipelines
- Understanding of access management in microservices architectures
- Experience with AWS, Terraform, GitHub, Jira, Okta, and SailPoint
- Ability to develop and assess Risk and Control Matrices
- Ability to interpret system architecture diagrams and identify control coverage gaps or duplication
- Strong communication skills for translating technical architecture into audit-ready documentation
Wise Compensation & Benefits Highlights
-
Leave & Time Off Breadth — U.S. materials describe extensive paid leave (PTO, sick time, holidays, “Me Days,” volunteer and compassionate leave) plus a paid six‑week sabbatical after four years. Feedback suggests the time‑off package is a standout element of the offering.
-
Parental & Family Support — Benefits information highlights up to 18 weeks of fully paid parental leave in many locations, with clear tenure qualifiers in some markets. Feedback suggests these policies are robust and a notable strength.
-
Equity Value & Accessibility — Company and job-posting materials indicate RSUs are a regular part of compensation, with a shift toward RSUs since 2022. Feedback suggests the equity component is a relatively substantial part of total rewards.
Wise Insights
What We Do
Wise is a global technology company, building the best way to move and manage the world's money. With Wise Account and Wise Business, people and businesses can hold 40 currencies, move money between countries and spend money abroad. Large companies and banks use Wise technology too; an entirely new network for the world's money. Launched in 2011, Wise is one of the world’s fastest growing, profitable tech companies. In fiscal year 2025, Wise supported around 15.6 million people and businesses, processing over $185 billion in cross-border transactions and saving customers around $2.6 billion.
Why Work With Us
We’re truly global in who we are, how we work, and how we build. Everything we do is centred around creating a world of money that’s fast, easy, fair. And open to all. Everyone who works here owns a piece of Wise, from the work they do, to the stock they hold.
Gallery
Wise Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
We expect new joiners in the office most days to build connections and learn from colleagues for their first six months. After that, most Wisers split their working week between the office and home, typically coming in at least 12 times a month.










