SOx ITGC Senior Lead (Permanent Position) Join ArcelorMittal Dofasco as a SOX ITGC Compliance Senior Lead and play a pivotal role in strengthening our IT control environment. In this position, you will lead the planning, coordination, and execution of our IT General Controls SOX Compliance program—from risk assessment and scoping to testing, reporting, and remediation. Acting as a strategic advisor and liaison between IT, Finance, Control Owners, Internal Assurance, and external auditors, you will ensure our compliance practices are robust, efficient, and aligned with global standards.Overall ResponsibilityLead and oversee the planning, coordination, evaluations and reporting for the IT General Controls SOX Compliance program, from risk assessment and scoping through to reporting of results & remediation.Develop or localize globally issued IT SOX related requirements, policies, and compliance standards.Serve as a liaison between IT and other departments (e.G., finance, Global CIO, Internal Assurance, etc.) and external auditors with respect to the local SOX program.Act as the Senior Lead advisor to the IT department to continually strengthen control posture.Risk Assessment, Scoping and Program MethodologyLead IT Business Application Risk Assessment (IT BARA) process to confirm IT elements in scope and apply the IT Control Framework to in‑scope systems, tools, and infrastructure.Define local IT SOX related guidance, frameworks, testing requirements, and communication expectations with control owners and service providers.Ensure development or maintenance of relevant IT controls documentation (e.G., IT BARA, IT Control Framework, risk‑control matrices, narratives, flowcharts, test plans).IT SOX Testing DeliveryDetermine and communicate annual testing timelines and schedules; maintain on‑time delivery of the SOX testing program.Collaborate with process and control owners, finance SOX leads, and relevant third parties to deliver a comprehensive and risk‑aligned SOX program.Oversee and provide quality assurance over annual evaluations of design and operating effectiveness for in‑scope controls and systems.Identify deficiencies, root causes, and develop clear, concise,



practical recommendations; ensure timely remediation.Monitor IT SOX service provider performance and manage the allocated budget to ensure compliance with SOX requirements.Prepare and present periodic reports and presentations on IT SOX compliance and issues to stakeholders at various management levels.Collaborate with external auditors during the audit process, providing documentation and addressing audit findings.Monitor remediation against plans, timing, and coordinate and oversee remediation testing and validation processes.Liaison and Stakeholder CoordinationCoordinate and communicate with global teams (e.G., GCIO) to ensure consistent IT SOX compliance practices.Collaborate with business process SOX teams to align IT SOX testing with overall risk assessment and scoping efforts.Collaborate with third‑party service providers engaged in IT SOX testing, ensuring clear communication and quality deliverables.Engage in ongoing dialogue with IT External Audit team to provide testing materials and reduce duplication of effort.Business Engagement, Remediation Advisory and Process ImprovementResearch and maintain currency with regulations and industry best practices related to IT controls and SOX compliance.Collaborate with IT Department and business process owners to identify remediation plans or opportunities for strengthening IT controls.Maintain understanding of system development, key projects, and potential changes that could impact program scope; identify gaps andsupport project teams.Participate in projects aimed at improving governance, risk management, and compliance frameworks, including training and awareness sessions.Provide advice and recommendations to strengthen and optimize ITGCs within the IT Department and lead implementation where needed.Education & AccreditationBachelor's degree in Information Systems, Computer Science, or a related field.Professional certifications such as CISA or CIA are preferred.Minimum of 7 years of experience in IT audit, internal controls, or compliance with a focus on SOX compliance.Prior Big 4 accounting firm experience is an asset.Experience managing IT SOX programs through technology transformation is an asset.Experience leading and managing IT SOX compliance programs.Experience in industrial manufacturing (e.G., steel)



is an asset.KnowledgeExpert knowledge of SOX requirements and leading SOX programs.Expert knowledge of SOX internal controls framework.Expert knowledge and practical experience in designing, evaluating, and testing various IT general controls across different technology environments.Solid understanding of IT processes, systems, and technologies, including critical business applications such as SAP ECC/S4HANA and cloud environments.Ability to identify risks and recommend cost‑effective controls.Knowledge of the steel industry and overall business operations.SkillsAdvanced project management, coordination, and team‑leadership skills.Excellent verbal and written communication skills.Strong interpersonal and presentation skills.Strategic thinking with strong analytical and problem‑solving abilities.Excellent organizational and time‑management skills.Robust influencing skills to balance technical and business considerations.Ability to translate technical IT concepts into business risks and vice versa.Work EnvironmentOffice environment with some plant exposure.Hours of Work Days, Monday to Friday with extended hours as required to meet internal/external customer requirements.Benefits & Total RewardsSalary range: $115,000 - $144,000 (starting salary dependent on qualifications and experience).Participation in annual bonus plan (15% of company goal achievement).Company‑paid Defined Contribution Pension Plan (no employee contribution; employer 5‑10%).Competitive vacation allowances.Group benefits with no health and dental premiums; employee pays only amounts above plan limits.Life insurance premiums shared with the company.Profit Sharing After two years of permanent company service, participation in profit sharing where all permanent employees share equally in allocated profits.Other Immediate BenefitsCompetitive vacation entitlements.PPE and workwear provided at no cost.Wellness and Employee Assistance Programs.Free access to three onsite fitness centres and a 70‑acre recreation park with facilities for you and your family.We would like to thank all those who apply in advance since only applicants selected to complete an online assessment will be contacted.ArcelorMittal Dofasco is an equal opportunity employer and encourages all qualified candidates to apply. We are committed to providing accommodations for people with disabilities to support their participation in all aspects of the recruitment and selection process. If you require accommodation, we will work with you to meet your needs.#J-18808-Ljbffr

📌 Sox Itgc Compliance Senior Lead - Financial Department - $115,000 - $144,000 A Year (Hamilton)
🏢 ArcelorMittal Dofasco
📍 Hamilton