IT SOX Controls Specialist

Who we are About Stripe span 400; Stripe is a financial infrastructure platform for businesses. Millions of companies, from the world’s largest enterprises to the most ambitious startups, use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career. About the team Finance is the strategic engine that drives rigorous decision making and acts as the financial stewards of Stripe s businesses - and we d like your help. Stripe is building a world class Controllership team, which is responsible for the corporate SOX program. Stripe is seeking a bar-raising IT SOX Controls Specialist to join its SOX team. This growing team is responsible for the global implementation and operation of Stripe s SOX program. We seek a candidate that is excited by the challenge of working for a hyper-growth company that is focused on expanding the economic infrastructure of the internet. What you’ll do The IT SOX Controls Specialist is a key member of Stripe s SOX Compliance function within the Chief Accounting Organization, building confidence for our investor community through a strong and scalable SOX program. In this role, you will own the design, implementation, and monitoring of controls over third-party applications and service providers that impact Stripe s financial reporting. You will work closely with business process owners, IT, Procurement, and Vendor Management teams, reporting to the Head of SOX Compliance. Responsibilities Own the end-to-end SOX assessment lifecycle for third-party applications in scope for financial reporting, including identification, risk tiering, and control mapping Lead the evaluation and review of third-party SOC 1 and SOC 2 reports (SSAE 18 / ISAE 3402), assessing complementary user entity controls (CUECs) and identifying gaps that require compensating controls at Stripe Design and implement controls to address risks arising from third-party systems and integrations that impact the financial reporting supply chain Develop and maintain SOX-ready documentation for third-party control environments, including risk and control matrices (RCMs), narratives, and process flow diagrams Project manage control definition and implementation for new third-party system