IT SOX Administrator

Trinity Industries is seeking an IT SOX Administrator to join our team at the HQ office in Dallas, TX. The ideal candidate manages and enforces Sarbanes-Oxley (SOX) compliance within Trinity’s IT systems and processes. This role requires collaboration with finance and audit teams to support and monitor SOX controls, ensuring robust processes for access reviews and segregation of duties. Detailed documentation and reporting are needed to support audit readiness. Prior SOX auditing experience is required. Experience with Oracle’s Risk Management Cloud (RMC) is strongly preferred.

What You’ll Do:

SOX Compliance and Control Implementation

• Oversee and enforce SOX controls within financial and operational systems, ensuring audit compliance and preparation.

Documentation and Audit Preparation

• Ensure detailed documentation of configurations, processes, and compliance measures to support audit requirements and complete audit testing.

System Access Reviews and Segregation of Duties

• Maintain and review documentation, testing, and evidence to support SOX audits and compliance reviews.
• Run and manage User Access Reviews in RMC.
• Run and manage Segregation of Duties controls in RMC.
• Run and manage the Daily Role Authority Reviews in RMC.
• Run and manage the Advanced Financial Controls in RMC. 

Monitoring and Reporting

• Monitor and report on SOX control effectiveness and remediation.
• Periodically review and collect data evidence for SOX controls in IT systems.
• Lead coordination with external auditors during IT SOX compliance assessments and walk throughs.

Access Governance & Control

• Approve or reject user access requests to SOX-sensitive systems based on established policies.
• Enforce segregation of duties (SoD) and escalate conflicts when violations occur.

Controls & Compliance

• Define, document, and update SOX control procedures (e.g., IT general controls, application controls).
• Determine remediation actions for identified control deficiencies in collaboration with control owners.

Audit & Reporting

• Validate completeness and accuracy of evidence required for SOX audits.
• Certify that controls were executed as designed or escalate exceptions.
• Escalate unresolved compliance issues to management, internal audit, or external auditors.
• Halt or restrict non-compliant activity within systems in scope of SOX.
• Review and approve/reject change requests that impact SOX in-scope systems.
• Require additional testing or documentation for SOX-relevant changes.