GRC, SOX Risk Management & Cybersecurity AI Architect

Role: GRC, SOX Risk Management & Cybersecurity AI Architect

Location: Atlanta, GA

Role Overview

The GRC, SOX Risk Management & Cybersecurity AI Architect will be responsible for integrating SOX risk management, GRC governance, and cybersecurity controls with AI driven solutions. This role requires deep expertise in SOX controls and compliance processes, combined with the ability to identify, design, and architect AI use cases that enhance control effectiveness, audit readiness, monitoring, and remediation within the current SOX ecosystem.

The role will act as a strategic bridge between Risk & Compliance, Cybersecurity, Audit, and Technology teams, enabling intelligent automation, advanced analytics, and continuous assurance while maintaining strict SOX compliance.

Key Responsibilities

SOX & GRC Risk Management

• Provide subject matter expertise on SOX Information Technology controls, GRC frameworks, and compliance governance.
• Identify and define SOX scope, including in `scope processes, systems, applications, risks, and controls.
• Review and assess SOX control design and operating effectiveness across IT and cybersecurity domains.
• Identify control gaps, SOX deficiencies, and emerging risks within the existing control environment.
• Support audit cycles by ensuring alignment between SOX requirements, control execution, and evidence expectations.

AI Use Case Identification within SOX Ecosystem

• Identify, evaluate, and define AI and advanced analytics use cases applicable to the current SOX and GRC ecosystem, including:
  • Continuous control monitoring
  • Automated evidence validation and quality checks
  • SOX deficiency trend analysis and prediction
  • Audit readiness and query response optimization
  • Control execution anomaly detection
  • Risk scoring and prioritization
• Assess feasibility, risk, and compliance impact of AI use cases within SOX boundaries.
• Ensure AI solutions enhance SOX compliance without introducing regulatory, audit, or data integrity risks.
• Experience with automation technologies such as RPA, scripting, APIs, workflow tools, and Continuous Controls Monitoring
• Understanding of IT infrastructure, cloud platforms (AWS/Azure/Google Cloud Platform), ERP systems, and application controls