Manager, IT SOX Compliance

Remote - West Coast

Position Overview: 

MARA is seeking a detail-oriented and experienced Manager of IT SOX Compliance to help drive the execution and maturity of our internal control environment as it relates to IT General Controls (ITGCs) and Internal Controls over Financial Reporting (ICFR). This role will serve as the primary point of contact within IT for SOX compliance, supporting control design, testing readiness, documentation, remediation, and cross-functional alignment. 

You will work closely with Internal Audit, external advisors, and external auditors to ensure that IT control requirements are designed appropriately, operating effectively, and aligned with MARA’s risk posture. This is a hands-on, high-impact manager-level role within a fast-paced and high-growth environment. 

MARA (NASDAQ:MARA) is a global leader in digital asset compute that develops and deploys innovative technologies to build a more sustainable and inclusive future. MARA secures the world’s preeminent blockchain ledger and supports the energy transformation by converting clean, stranded, or otherwise underutilized energy into economic value. 

Essential Duties & Responsibilities: 

Include the following. Other duties may be assigned. 

• Serve as IT’s primary owner and coordinator for SOX compliance and ICFR-related responsibilities. 

• Manage the design, documentation, execution, and monitoring of IT General Controls (access, change management, IT operations, SDLC). 

• Maintain comprehensive and audit-ready documentation for all in-scope controls, systems, and processes. 

• Coordinate testing activities with Internal Audit and ensure timely, complete, and accurate evidence collection. 

• Partner with system and process owners to ensure deficiencies are remediated effectively and timely. 

• Collaborate with external auditors and advisors to manage requests, walkthroughs, and support during testing cycles. 

• Participate in scoping activities for in-scope systems and help evaluate the impact of system changes or new implementations on control requirements. 

• Contribute to the evaluation of IT-related deficiencies and support quarterly reporting on the state of the IT control environment. 

• Support risk assessments and readiness for new regulatory or operational initiatives. 

• Provide guidance and documentation support for control owners across IT functions. 

• Assist in the development of flowcharts, narratives, risk/control matrices, and process documentation. 

• Maintain up-to-date understanding of emerging regulations, audit expectations, and risk frameworks. 

Qualifications: 

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodation may be made to enable individuals with disabilities to perform essential functions. 

• 5–7 years of relevant experience in IT audit, IT compliance, or SOX-related roles. 

• Big 4 experience is required. 

• Strong knowledge of SOX 404, ITGCs, and ICFR concepts and requirements. 

• Familiarity with control frameworks such as COSO, COBIT, and relevant standards such as SOC 1, SOC 2, ISO 27001, and NIST. 

• Hands-on experience supporting system development lifecycle (SDLC) controls and change management processes. 

• Experience supporting cloud and SaaS-based environments and enterprise applications (e.g., NetSuite, Workday, Salesforce, AWS, etc.). 

• Ability to evaluate and document technical controls clearly and concisely. 

• Excellent written and verbal communication skills, especially in preparing flowcharts, control documentation, and audit responses. 

• Strong project management skills and ability to manage multiple workstreams in parallel. 

• Comfortable working in a fast-paced, dynamic environment with changing priorities and deadlines. 

Education and/or Experience: 

• Bachelor’s degree in Information Systems, Accounting, Business, or a related field. 

• Certifications such as CISA, CIA, or CPA are a plus. 

• Prior experience in a public company or high-growth technology environment is highly desirable. 

• Familiarity with segregation of duties (SoD), application controls, and automated financial controls is a plus.