Technology Internal Controls Supervisor
This position is responsible for managing personnel and functions surrounding Southern Company’s technology-related Sarbanes-Oxley (SOX) controls, ensuring all control objectives are achieved to support management’s SOX 404 certification.
JOB REQUIREMENTS
- Bachelor’s degree in Computer Science / Information Security, Information Systems, Accounting or related field required
- Certified Information Systems Auditor (CISA), Certified Risk and Information Security Controls (CRISC) certifications or related industry certifications preferred.
- Minimum of seven years’ experience in financial applications support, technology risk, or compliance (financial controls, technology controls or audit) required.
- Strong working knowledge of SOX/internal control concepts and evidence standards as well as application security concepts.
- Ability to effectively apply technology knowledge to evaluate SOX control impact and risk associated with key financial applications (KFA), key financial tools (KFTs), and segregation of duties.
- Have general understanding accounting concepts and requirements to determine appropriate risk levels of applications and related tools to financial reporting.
- Leadership experience preferred, including performance management and employee development.
- Excellent interpersonal, analytical, and organizational skills.
- Superior communication skills, both verbal and written to engage, build credibility and maintain relationships with business partners.
- Ability to initiate and manage multiple complex projects.
- Demonstrate behaviors consistent with company culture – Safety First, Intentional Inclusion, Act with Integrity, Superior Performance.
- Familiarity with Oracle products and Workiva software a plus.
MAJOR JOB RESPONSIBILITIES:
- Provide leadership in the following areas to support the company’s SOX compliance:
- Annual SOX risk assessment, scoping and planning for IT-related controls (automated controls, general computing controls, and logical access).
- Evaluate the design and operating effectiveness of IT-related controls, including controls around key reports (information used in controls).
- Evaluate and document IT SOX control deficiencies, including severity assessment, root cause analysis, exposure analysis, and remediation plans.
- Quarterly/annual control certification for IT-related controls.
- Assess new applications and tools and/or changes to existing applications and tools for SOX impact.
- Provide internal controls leadership for application and tool implementations.
- Facilitate the annual SSAE 18 (SOC report) assessments and segregation of duties (SOD) analysis.
- Build and maintain strong relationships with control owners and performers in IT and business departments, internal auditors, and external auditors to further enable common goals and efficiencies.
- Identify and implement innovative solutions to achieve process efficiencies around controls testing.
- Develop and coach direct reports.
About Us
About Southern Company
Southern Company (NYSE: SO) is a leading energy provider serving 9 million customers across the Southeast and beyond through its family of companies. Providing clean, safe, reliable and affordable energy with excellent service is our mission. The company has electric operating companies in three states, natural gas distribution companies in four states, a competitive generation company, a leading distributed energy solutions provider with national capabilities, a fiber optics network and telecommunications services. Through an industry-leading commitment to innovation, resilience and sustainability, we are taking action to meet customers' and communities' needs while advancing our goal of net-zero greenhouse gas emissions by 2050. Our uncompromising values ensure we put the needs of those we serve at the center of everything we do and are the key to our sustained success. We are transforming energy into economic, environmental and social progress for tomorrow. Our corporate culture has been recognized by a variety of organizations, earning the company awards and recognitions that reflect Our Values and dedication to service. To learn more, visit www.southerncompany.com.
Southern Company invests in the well-being of its employees and their families through a comprehensive total rewards strategy that includes competitive base salary, annual incentive awards for eligible employees and health, welfare and retirement benefits designed to support physical, financial, and emotional/social well-being. This position may also be eligible for additional compensation, such as an incentive program, with the amount of any bonus/awards subject to the terms and conditions of the applicable incentive plan(s). A summary of the benefits offered for this position can be found here https://seo.nlx.org/southernco/pdf/SOCO-Benefits.pdf. Additional and specific details about total compensation and benefits will also be provided during the hiring process.
Skills Required
- Bachelor's degree in Computer Science, Information Security, Information Systems, Accounting, or related field
- Minimum of seven years' experience in financial applications support, technology risk, or compliance (financial controls, technology controls or audit)
- Strong working knowledge of SOX/internal control concepts and evidence standards and application security concepts
- Ability to evaluate SOX control impact and risk for key financial applications, tools, and segregation of duties
- General understanding of accounting concepts and financial reporting requirements
- Excellent interpersonal, analytical, and organizational skills
- Superior verbal and written communication skills
- Ability to initiate and manage multiple complex projects
- Demonstrated behaviors consistent with company culture (Safety First, Intentional Inclusion, Act with Integrity, Superior Performance)
- Leadership experience including performance management and employee development
- CISA, CRISC, or related industry certifications
- Familiarity with Oracle products and Workiva software
What We Do
Southern Company Services, Inc., headquartered in Birmingham, Alabama, is the shared services division of Southern Company.
