Program Manager, IT SOX Compliance - Apple Ads

About This Role

Managing IT SOX compliance for the Apple Ads group is the core of this program manager role. This position involves understanding complex technical environments, evaluating IT control risks, and partnering with engineering teams to design and improve scalable compliance processes. This is a hands-on role that interacts directly with engineering teams across Apple Ads and cross-functional stakeholders across Apple to support SOX compliance and strengthen the organization's IT control environment.

Responsibilities

• Partner with engineering and infrastructure teams to establish, evaluate, and improve IT General Controls (ITGCs) supporting SOX compliance
• Develop and maintain clear, detailed, and accurate SOX documentation, including process flows, control descriptions, risk control matrices, and audit work papers
• Coordinate SOX compliance activities with control owners, engineering stakeholders, external auditors, and cross-functional compliance teams
• Support the planning and execution of SOX activities including scoping, walkthroughs, control identification, testing coordination, evidence review, and reporting
• Review control execution artifacts and audit evidence to ensure compliance with SOX testing and documentation standards
• Provide guidance on controls related to change management, access management, SDLC processes, database administration, operating systems, and cloud-based infrastructure (e.g., AWS, GCP, Azure)
• Monitor and track remediation efforts for identified control gaps and audit findings, driving accountability and timely resolution across stakeholders
• Partner with teams to identify opportunities for control automation, monitoring improvements, and operational efficiency
• Communicate compliance risks, audit observations, and remediation priorities clearly to technical and non-technical stakeholders
• Help cultivate a continuous compliance mindset across the organization through partnership, education, and process improvement initiatives

Requirements

• 5+ years of experience in IT SOX compliance, IT audit, internal controls, or external audit
• Strong experience with SOX IT General Controls (ITGCs), including testing methodologies, control evaluation, documentation standards, and audit evidence requirements
• Experience partnering with engineering or infrastructure teams in large-scale technical or cloud-based environments
• Strong understanding of controls related to change management, access management, SDLC processes, databases, operating systems, and cloud infrastructure
• Proven ability to assess technical and compliance risks and drive remediation efforts across cross-functional stakeholders
• Strong communication, organizational, and project management skills
• Ability to navigate ambiguity, manage multiple priorities, and influence across technical and non-technical teams