IT GRC Specialist (Technical Compliance & SOX) – Sr. Engineer
Description
Enphase Energy is a global energy technology company and a leading provider of solar, battery, and electric vehicle charging products. Founded in 2006, our innovative microinverter technology revolutionized solar power, making it a safer, more reliable, and scalable energy source. Today, the Enphase Energy System enables users to make, use, save, and sell their own power. Enphase is also one of the most successful and innovative clean energy companies in the world, with more than 80 million products shipped across 160 countries.
Join our dynamic teams designing and developing next-gen energy technologies and help drive a sustainable future!
We are seeking a highly technical IT GRC (Governance, Risk, and Compliance) Specialist to join our IT team. Unlike a traditional coordinator role, this is a hands-on position requiring deep technical knowledge of our core systems. You will be the primary technical contact point for the SOX (Sarbanes-Oxley) audit team, responsible for meeting all SOX data requests, conducting process walkthroughs and ensuring our internal controls are not only designed correctly but also effectively implemented within our cloud ecosystem.
Key Responsibilities
- SOX Liaison & Execution: Act as the "Front Door" for all IT-related SOX queries. You won't pass questions along; you will investigate, pull evidence, and validate the accuracy of data before it reaches the auditors.
- Hands-on Control Validation: Perform technical testing of automated controls, user access reviews (UAR), and Change Management logs across integrated platforms.
- System Configuration Oversight: Partner with IT Admins to ensure configurations in Oracle Fusion and SFDC (Salesforce) remain in compliance with SOD (Segregation of Duties) policies.
- Integration Auditing: Monitor and audit data flows through Oracle OIC to ensure the integrity of financial data passing between systems.
- Policy Enforcement: Manage and audit the Office 365 environment, focusing on security groups, data retention, and administrative privilege management.
- Remediation Leadership: When a control deficiency is identified, you will work directly within the systems to design and implement technical remediations.
Required Technical Experience
- ERP & CRM Mastery: Proven experience managing or auditing Oracle Fusion (ERP), Workday and Salesforce (SFDC).
- Middleware Knowledge: Understanding of integration layers, specifically Oracle Integration Cloud (OIC), and how data transformations impact financial reporting.
- SaaS Administration: Experience with Office 365 security/compliance centers and identity management.
- Audit Methodology: Solid grasp of COBIT or NIST frameworks and their application to SOX 404 requirements.
- Preferred Certifications: CISA (Certified Information Systems Auditor), CRISC, or similar technical audit credentials.
Non-Technical Skills:
- Excellent communication and collaboration skills, with the ability to interact with finance users in their language.
- Problem-solving skills and a professional, diligent, and hardworking attitude.
- Ability to work in a fast-paced environment with aggressive timelines and multiple teams coordinating with each other
- Stakeholder management
- Mindset: You enjoy "going under the hood" of an application to see how a workflow is configured rather than just reading a policy document.