IT Director, SOX

Flex intends to spin off its Cloud and Power Infrastructure segment into a new, independent publicly traded company, which we’re calling SpinCo, until the name is unveiled. The spin is planned for Q1 2027. If the intended spin occurs, this role will support SpinCo, which will focus on critical digital infrastructure, delivering end-to-end power and thermal management solutions for AI data centers and other mission-critical applications.

The IT Director, SOX Compliance is responsible for leading the global IT Sarbanes-Oxley (SOX) compliance program and ensuring the effectiveness of Information Technology General Controls (ITGCs) supporting financial reporting. This role provides leadership for SOX governance, controls management, audit coordination, continuous monitoring, remediation activities, and regulatory compliance initiatives. The Director serves as a strategic partner to Internal Audit, External Audit, Finance, IT Operations, Cybersecurity, Enterprise Applications, and business stakeholders to maintain a sustainable and scalable compliance program.

The position is accountable for driving a risk-based compliance strategy, improving control effectiveness, increasing automation, reducing audit effort, and ensuring compliance with regulatory and corporate governance requirements. Key areas of coverage include access management, change management, system development lifecycle controls, backup and recovery, interface monitoring, third-party assurance, and application governance.

What a typical day looks like:

SOX Program Leadership

• Lead the global SOX IT compliance program and annual compliance strategy.
• Own the SOX ITGC framework, governance model, scope, and compliance roadmap.
• Establish and maintain policies, standards, procedures, and control requirements supporting SOX compliance.
• Ensure appropriate governance and oversight across all in-scope systems, applications, infrastructure, and technology services.
• Provide executive reporting on compliance status, risks, remediation activities, and audit readiness.

SOX & IT Controls Management

• Maintain annual SOX application inventory and risk-based scoping.
• Oversee design, implementation, operation, and testing of IT General Controls (ITGCs).
• Ensure effectiveness of controls related to:
  • User provisioning and deprovisioning
  • Privileged access management
  • Access recertifications
  • Password and authentication controls
  • Change management
  • System implementation and migration controls
  • Backup and recovery processes
  • Key interface monitoring
  • Third-party service provider controls (SOC reports and CUECs)
• Drive control automation and continuous monitoring initiatives.

Audit Management & Assurance

• Serve as primary IT compliance liaison for Internal Audit and External Auditors.
• Coordinate quarterly, interim, and year-end audit activities.
• Manage audit requests, evidence collection, walkthroughs, testing support, and audit responses.
• Review audit findings and ensure timely remediation and closure.
• Establish sustainable evidence management and compliance documentation practices.
• Lead audit readiness assessments and control maturity improvements.

Risk Management & Continuous Improvement

• Identify and assess IT compliance, operational, and financial reporting risks.
• Partner with IT and business leaders to develop risk mitigation strategies.
• Maintain SOX risk and issue registers.
• Establish control performance metrics and key risk indicators (KRIs).
• Drive process simplification, automation, and compliance transformation initiatives.
• Benchmark compliance practices against industry standards and emerging regulatory requirements.

Leadership & People Development

• Lead and develop a global team of compliance managers, analysts, and control specialists.
• Establish performance objectives and development plans for team members.
• Promote a culture of accountability, operational excellence, and continuous improvement.
• Build strong cross-functional partnerships across Finance, Internal Audit, Cybersecurity, Enterprise Applications, Infrastructure, and PMO organizations.