Senior Data & SOX Controls Architect

Title: Senior Data & SOX Controls Architect

Location: New York (Hybrid)

Duration: Long term contract

About the Company:

Since its founding in 1996, CTC has grown into a trusted global partner in AI & ML, Enterprise Applications, Digital Services, Managed Services, and Business Services. With headquarters in Detroit, Michigan, CTC has a team of over 2,000 experts worldwide. We empower more than 100 organizations to tackle complex challenges and transform them into sustainable competitive strengths--driving innovation, efficiency, and growth every step of the way. Our strengths have always been Commitment to Customer, Commitment to Colleagues, and Commitment to Community (CTC).

About the Role

We are seeking a Senior Data & SOX Controls Architect to bridge the gap between financial reporting risks and technical engineering solutions. In this hybrid role, you will translate complex financial reporting risks into practical data, engineering, pipeline, application, and automated controls.

You will work at the intersection of Data Engineering, IT Audit, and SOX Compliance, ensuring that our financial data flows are secure, accurate, and fully controlled from source systems to the General Ledger (GL).

Key Responsibilities

Control Design & Architecture

• Data Flow Mapping: Map financial data flows from source systems through transformation pipelines to the General Ledger (GL).
• Control Point Identification: Identify and define critical control points across data ingestion, transformation, aggregation, and reporting layers.
• Automated Controls: Design and implement automated controls over data pipelines to ensure data integrity and financial accuracy.
• Application Controls: Assess and design automated application controls (ITACs) and controls around key reports and Information Produced by the Entity (IPE).
• Risk Assessment: Identify risks associated with data transformations and assess data lineage, completeness, and accuracy controls.

Audit & Compliance Support

• SOX & ITGC: Support the development of the Risk Control Matrix (RCM) and control design, ensuring alignment with SOX, ITGC, and COSO frameworks.
• Audit Liaison: Translate Internal Audit (IA) and external auditor requirements into actionable engineering requirements.
• Testing Support: Support Test of Design (TOD) and Test of Operating Effectiveness (TOE) remediation efforts.
• Evidence Review: Review technical evidence supporting control operation to ensure audit readiness.

Collaboration & Remediation

• SOD Management: Identify Segregation of Duties (SOD) conflicts within engineering and data environments and propose mitigation strategies.
• Engineering Partnership: Partner closely with data engineering and software development teams to implement remediation plans and embed controls into the development lifecycle.

Ideal Profile

Experience

• 8–12+ years of experience in Data Engineering, Technology Risk, IT Audit, or SOX Controls.
• Proven track record of designing automated controls within complex data environments.

Technical Skills

• Strong proficiency in SQL and deep knowledge of data platforms (e.g., Snowflake, Databricks, BigQuery).
• Hands-on experience with ETL/ELT processes, data pipelines, APIs, and cloud platforms (AWS, Azure, or GCP).
• Experience working with large-scale financial data and databases.
• Strong understanding of SOX , ITGC , Application Controls , IPE , and Data Lineage .

Certifications & Soft Skills

• Preferred Certifications: CISA, CPA, CIA, or similar.
• Excellent communication skills with the ability to translate technical concepts for non-technical finance and audit stakeholders.