The opportunity
Finance is the strategic engine that drives rigorous decision making and acts as the financial stewards of Stripe's businesses - and we'd like your help. Stripe is building a world class Controllership team, which is responsible for the corporate SOX program.
What you'll do
Own the end-to-end SOX assessment lifecycle for third-party applications in: scope for financial reporting, including identification, risk tiering, and control mapping
Lead the evaluation and review of third-party SOC 1 and SOC 2 reports (SSAE: 18 / ISAE 3402), assessing complementary user entity controls (CUECs) and identifying gaps that require compensating controls at Stripe
Design and implement controls to address risks arising from third-party: systems and integrations that impact the financial reporting supply chain
Develop and maintain SOX-ready documentation for third-party control: environments, including risk and control matrices (RCMs), narratives, and process flow diagrams
Project manage control definition and implementation for new third-party: system implementations, migrations, and integrations with financial reporting impact
Partner with IT, Procurement, and business stakeholders to embed control: requirements into the vendor onboarding and periodic review process
What they're looking for
- Bachelor's degree; Master's degree a plus in Accounting, Information Systems, Finance, or related field
- Technical certification required (e.g., CPA, CIA, CISA, PMP)
- + years of work experience in managing and/or assessing SOX programs
- Big 4 audit firm or equivalent audit experience
- Developed expertise and extensive experience with leading and performing SOX: business process program design, control implementation, and monitoring of SOX program
- Hands-on experience evaluating third-party SOC reports (SOC 1 / SOC 2) and assessing CUEC coverage and gaps
- Familiarity with IT general controls and application-level controls in the: context of financial reporting systems
- Strong knowledge of technical accounting, order to cash, and financial close & reporting controls
