Senior SOX IT Auditor

Your work days are brighter here.

We’re obsessed with making hard work pay off, for our people, our customers, and the world around us. As a Fortune 500 company and a leading AI platform for managing people, money, and agents, we’re shaping the future of work so teams can reach their potential and focus on what matters most. The minute you join, you’ll feel it. Not just in the products we build, but in how we show up for each other. Our culture is rooted in integrity, empathy, and shared enthusiasm. We’re in this together, tackling big challenges with bold ideas and genuine care. We look for curious minds and courageous collaborators who bring sun-drenched optimism and drive. Whether you're building smarter solutions, supporting customers, or creating a space where everyone belongs, you’ll do meaningful work with Workmates who’ve got your back. In return, we’ll give you the trust to take risks, the tools to grow, the skills to develop and the support of a company invested in you for the long haul. So, if you want to inspire a brighter work day for everyone, including yourself, you’ve found a match in Workday, and we hope to be a match for you too.

About the Team

About the Role

We are seeking a highly motivated and experienced Senior SOX IT Auditor to join our SOX and Internal Controls organization in Pune. This role will lead and execute risk-based assessments of IT controls supporting financial reporting, helping ensure the design and operating effectiveness of controls across our technology environment. Reporting to the SOX IT Manager, you will partner with Technology, Finance, Accounting, business-process owners, and external auditors to evaluate IT risks, test controls, support remediation, and drive continuous improvement. You will bring sound judgment, strong technical audit expertise, and a collaborative approach to helping teams build scalable, audit-ready processes. This role directly supports the organization’s evaluation of internal control over financial reporting. Under SOX Section 404, management and external auditors report on the adequacy of those controls. The team’s work includes evaluating controls across system and transaction flows, partnering with technical and business owners on control design, and supporting the testing that informs management’s conclusion on internal controls.  For major SOX-scoped implementations, the team may engage throughout UAT to confirm that testing is satisfactorily completed and documented.

Responsibilties:

• Lead end-to-end, risk-based SOX testing for IT general controls, automated application controls, and IT-dependent manual controls.
• Assess the design and operating effectiveness of controls across logical access, privileged access, change management, system development lifecycle, interfaces, job scheduling, data integrity, and key system configurations.
• Partner with control and system owners to understand end-to-end business and technology processes, identify financial-reporting risks, and define effective control activities.
• Review requirements, solution designs, implementation plans, and evidence for significant changes affecting SOX-scoped systems and processes.
• Evaluate UAT and associated documentation for SOX-scoped implementations and significant system changes, where applicable.
• Develop clear test plans, workpapers, evidence requests, testing conclusions, and issue documentation in accordance with internal methodology.
• Communicate control findings, root causes, and practical remediation recommendations to technical and business stakeholders.
• Track remediation plans, validate corrective actions, and escalate risks or delays as appropriate.
• Support quarterly and annual management SOX assessments, including coordination with external auditors.
• Serve as a trusted advisor to stakeholders on control design, documentation, evidence quality, and audit readiness.
• Contribute to continuous improvement through control rationalization, automation, analytics, and enhancements to GRC and audit-management processes.
• Coach and review the work of junior team members as needed.

About You

Basic Qualifications:

• Bachelor’s degree in Information Systems, Computer Science, Accounting, Finance, Audit, or a related discipline.
• 8 + years of progressive experience in IT audit, SOX compliance, internal controls, technology risk, or risk advisory.
• Strong working knowledge of SOX, IT general controls, automated application controls, and IT-dependent manual controls.

Other Qualifications:

• Proven ability to independently manage multiple priorities, deliver high-quality work on schedule, and exercise sound professional judgment.
• Experience working with ERP, SaaS, cloud, or enterprise business applications is preferred.
• CISA, CIA, CPA, CISSP, or similar professional certification is preferred.
• Curious, detail-oriented, and pragmatic approach. You balance independence with partnership: you can challenge control design and execution constructively while helping owners implement practical solutions.
• Comfortable working through ambiguity, managing a fast-moving audit calendar, and connecting technology risks to their potential financial-reporting impact.

Our Approach to Flexible Work
 

With Flex Work, we’re combining the best of both worlds: in-person time and remote. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. We know that flexibility can take shape in many ways, so rather than a number of required days in-office each week, we simply spend at least half (50%) of our time each quarter in the office or in the field with our customers, prospects, and partners (depending on role). This means you'll have the freedom to create a flexible schedule that caters to your business, team, and personal needs, while being intentional to make the most of time spent together. Those in our remote "home office" roles also have the opportunity to come together in our offices for important moments that matter.

Workday is committed to providing reasonable accommodations for qualified individuals during our application process, in order to perform one or more essential functions of their job, as well as regarding the use of AI tools for employment decision-making to any degree. Please see below for more details including how to request an accommodation as a qualified veteran, due to a disability or for religious reasons, or as otherwise provided under applicable law.

Workday prohibits taking adverse action against any candidate or employee for reporting a possible violation of this policy, requesting one or more work accommodations, exercising a privacy right, or cooperating in an investigation in accordance with applicable law. Any employee who retaliates against a candidate or employee for doing so may be subject to disciplinary action, up to and including termination of employment, to the fullest extent allowable under applicable law.

If you require a reasonable accommodation, you may email [email protected], as far in advance as possible.

Are you being referred to one of our roles? If so, ask your connection at Workday about our Employee Referral process!

At Workday, we value our candidates’ privacy and data security.  Workday will never ask candidates to apply to jobs through websites that are not Workday Careers. 

Please be aware of sites that may ask for you to input your data in connection with a job posting that appears to be from Workday but is not.

In addition, Workday will never ask candidates to pay a recruiting fee, or pay for consulting or coaching services, in order to apply for a job at Workday.