Program Manager, IT SOX Compliance - Apple Ads

At Apple, we work every day to create products that enrich people's lives. Our Apple Ads group makes it possible for people around the world to easily access informative and imaginative content on their devices while helping publishers and developers promote and monetize their work. Today, our technology and services power advertising in App Store, Apple News, Stocks, and Video. Our platforms are highly-performant, deployed at massive scale and setting new standards for enabling effective advertising while protecting user privacy.

Description

The Apple Ads team has an immediate opening for an IT SOX Compliance Program Manager and is looking for a driven and detail-oriented IT audit or SOX compliance professional who can understand complex technical environments, evaluate IT control risks, and partner effectively with engineering teams to design and improve scalable compliance processes. This is a hands-on role that will directly interact with engineering teams across Apple Ads, as well as cross-functional stakeholders across Apple, to support SOX compliance and strengthen the organization's IT control environment.

This position requires a teammate and self-starter with experience working on cross-functional, tactical, and detail-oriented initiatives to achieve business, operational, and technical goals. The ideal candidate brings strong knowledge of SOX compliance methodologies, IT General Controls (ITGCs), and audit practices, along with the ability to operate effectively in fast-paced and highly technical environments.

Responsibilities:

Partner with engineering and infrastructure teams to establish, evaluate, and improve IT General Controls (ITGCs) supporting SOX compliance

Develop and maintain clear, detailed, and accurate SOX documentation, including process flows, control descriptions, risk control matrices, and audit work papers

Coordinate SOX compliance activities with control owners, engineering stakeholders, external auditors, and cross-functional compliance teams

Support the planning and execution of SOX activities including scoping, walkthroughs, control identification, testing coordination, evidence review, and reporting

Review control execution artifacts and audit evidence to ensure compliance with SOX testing and documentation standards

Provide guidance on controls related to change management, access management, SDLC processes, database administration, operating systems, and cloud-based infrastructure (e.g., AWS, GCP, Azure)

Monitor and track remediation efforts for identified control gaps and audit findings, driving accountability and timely resolution across stakeholders

Partner with teams to identify opportunities for control automation, monitoring improvements, and operational efficiency

Communicate compliance risks, audit observations, and remediation priorities clearly to technical and non-technical stakeholders

Help cultivate a continuous compliance mindset across the organization through partnership, education, and process improvement initiatives

Preferred Qualifications

Experience at a Big 4 accounting firm strongly preferred

Experience supporting SOX compliance programs at a large public technology company preferred

Experience working with cloud-based infrastructure and definition of IT controls

Familiarity with GRC or compliance management tools

Familiarity with compliance processes supporting large-scale distributed systems

CISA, CISSP, or equivalent certification preferred

Minimum Qualifications

5+ years of experience in IT SOX compliance, IT audit, internal controls, or external audit

Strong experience with SOX IT General Controls (ITGCs), including testing methodologies, control evaluation, documentation standards, and audit evidence requirements

Experience partnering with engineering or infrastructure teams in large-scale technical or cloud-based environments

Strong understanding of controls related to change management, access management, SDLC processes, databases, operating systems, and cloud infrastructure

Proven ability to assess technical and compliance risks and drive remediation efforts across cross-functional stakeholders

Strong communication, organizational, and project management skills

Ability to navigate ambiguity, manage multiple priorities, and influence across technical and non-technical teams

Bachelor's Degree