[Skip to main content](#main-content)

[OpenNash Jobs](https://jobs.opennash.com/)
[Hiring report](/reports/hiring/) · [All Truist jobs](https://jobs.opennash.com/companies/truist/) · [Search jobs](/search/)

Truist · Raleigh, NC

# Sarbanes-Oxley (SOX) Governance Consultant

Raleigh, North Carolina, USA Full-time Consulting 

Listed on Truist’s official careers site. Posted August 21, 2026. Check that it is still open and apply there.
[Apply on Truist’s careers site →](https://careers.truist.com/us/en/job/TBJTBFUSR0117598EXTERNALENUS/Sarbanes-Oxley-SOX-Governance-Consultant)

[OpenNash Jobs](https://jobs.opennash.com/) / [Truist](https://jobs.opennash.com/companies/truist/) / Sarbanes-Oxley (SOX) Governance Consultant

## Job description

The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status. Need Help? If you have a disability and need assistance with the application, you can request a reasonable accommodation.

Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).

### Regular or Temporary

Regular Language Fluency: English (Required)

### Work Shift

1st shift (United States of America)

### Please review the following job description

In this role, you will serve as a member of the Technology, Data, and Operations (TD&O) Sarbanes-Oxley (SOX) Governance team, supporting Truist’s TD&O business unit in meeting requirements under Sections 404 and 302 of the Sarbanes-Oxley
- Act of 2002 and the Federal Deposit Insurance Corporation Improvement
- Act of 1991.

TD&O SOX Governance teammates serve as subject matter experts for SOX IT general controls and act as primary liaisons across TD&O leadership, process and control owners, SOX Program Management (SPM), the Business Execution and Risk Organization (BERO), and internal and external auditors. This role is responsible for coordinating SOX audit-related activities, managing and tracking audit requests, supporting audit readiness, and partnering with TD&O stakeholders to help ensure timely, accurate, and well-supported audit execution.

The role also requires openness to learning and responsibly embedding AI-enabled capabilities and identifying automation opportunities to improve the efficiency, consistency, and sustainability of SOX governance processes. Role expectations and accountabilities (other duties may be assigned as business needs evolve):
- Demonstrate knowledge of SOX IT general controls and coordinate with internal and external auditors to manage audit requests, track deliverables, and support timely, accurate audit execution.
- Partner with TD&O process and control owners, SOX Program Management, BERO, auditors, and other risk partners to support audit readiness, resolve request-related issues, and promote consistent SOX governance routines.
- Apply technology risk, IT control, and TD&O operational knowledge to evaluate SOX-related matters, advise business and technology partners, and identify practical, risk-informed solutions.
- Support documentation of SOX issues, development of remediation plans, and monitoring of remediation activities through timely resolution.
- Identify responsible opportunities to streamline, automate, and enhance SOX governance activities, reporting, audit request management, and related control support processes, including through appropriate use of AI-enabled capabilities.

### ESSENTIAL DUTIES AND RESPONSIBILITIES

Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.
- Identifies, assesses, and mitigates technology-related risks to maintain compliance with regulatory requirements and internal policies.
- Implements and monitors governance processes, controls, and procedures to manage technology risks effectively.
- Conducts gov ernance analysis, vulnerability assessments, and /or control testing to protect critical technology infrastructure and data.
- Provides detailed reporting on technology risk posture and compliance status to internal stakeholders.
- Manages and supports technology governance projects and assignments while collaborating with cross ‑ functional teams to ensure controls are integrated into technology projects and operations.
- May support audits or remediation activities by preparing documentation and responding to inquiries related to technology governance.
- Maintains awareness of industry best practices, regulatory changes, and evolving risk landscapes to update governance strategies.

### Required Qualifications

The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
- Bachelor’s degree in Information Technology, Information Security, Engineering, or related field.
- Minimum of 5 years of professional experience in technology governance.
- Knowledge of regulatory requirements and compliance frameworks.
- Experience applying governance assessment methodologies and control frameworks.

### Preferred Qualifications
- Master’s degree in Accounting, Finance, Information Technology, Information Systems, Cybersecurity, or a related field, or equivalent education and related training.
- Five or more years of experience performing, overseeing, or managing IT components of SOX audits, including IT general controls, automated controls, key reports, and audit evidence management.
- Experience working with internal audit, external audit, SOX program management, technology control owners, and risk partners to support audit execution, issue remediation, and control readiness.
- Strong understanding of technology risk, IT governance, change management, access management, SDLC, cybersecurity, infrastructure, cloud, and data-related control environments.
- Experience managing audit requests, tracking deliverables, monitoring remediation activities, and communicating status, risks, and escalations to stakeholders and leadership.
- Proficiency with Microsoft Office and Microsoft 365 collaboration and workflow tools, including Excel, PowerPoint, Word, Teams, SharePoint, and related reporting or automation capabilities.
- Relevant professional certification, such as CISA, CRISC, CISSP, CISM, CPA, CIA, or similar credential.

General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates.

Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist’s generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist’s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan.

As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work. Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law.

Truist is a Drug Free Workplace. EEO is the Law E-Verify IER Right to Work

## At a glance
- Posted by the employer: Aug 21, 2026
- First seen by OpenNash: Oct 13, 2026
- Last checked: Oct 20, 2026
- Listed for: 60 days
- Location: Raleigh, North Carolina, USA
- Employment type: Full-time[Apply on Truist’s careers site →](https://careers.truist.com/us/en/job/TBJTBFUSR0117598EXTERNALENUS/Sarbanes-Oxley-SOX-Governance-Consultant)

## More jobs at Truist

### [Brokerage Client Service Associate - Raleigh, North Carolina](https://jobs.opennash.com/companies/truist/jobs/73889d8e1f5218bc0eb0/)

Raleigh, North Carolina, USA

### [Business Connect Advisor-Raleigh/Chapel Hill/Durham](https://jobs.opennash.com/companies/truist/jobs/cbcd58316229dcd15e07/)

Raleigh, North Carolina, USA

### [Financial Advisor - Investment Services Group](https://jobs.opennash.com/companies/truist/jobs/39e83c22136cb702542a/)

Raleigh, North Carolina, USA

### [Financial Advisor - Private Client Group](https://jobs.opennash.com/companies/truist/jobs/9f46ec3a5e9dd02e8cf4/)

Raleigh, North Carolina, USA

### [Internal Auditor II - Finance & Regulatory Reporting](https://jobs.opennash.com/companies/truist/jobs/8ef33fa3ce445aff0c22/)

Raleigh, North Carolina, USA

## Similar jobs at other companies

### [Sox Analyst - Global Industrial](https://jobs.opennash.com/companies/genuine-parts/jobs/437b48b97266ab9d3f02/)

Genuine Parts · Birmingham, AL

### [Sr SOX Compliance Analyst OR SOX Compliance Consultant](https://jobs.opennash.com/companies/xcel-energy/jobs/f20de4acd6f540c06999/)

Xcel Energy · Minneapolis, MN, US

### [Manager, Infrastructure Governance](https://jobs.opennash.com/companies/cardinal-health/jobs/0960c9127141945d5080/)

Cardinal Health · OH

### [Data Governance Lead](https://jobs.opennash.com/companies/jpmorganchase/jobs/6cfc10ca3e5dacfe35a7/)

JPMorganChase · Chicago, IL, United States

### [Payments Governance Manager](https://jobs.opennash.com/companies/jpmorganchase/jobs/5052b1e052f574c13417/)

JPMorganChase · Plano, TX, United States

OpenNash lists jobs from employers’ own careers sites and does not handle applications.
Dates come from the employer where stated; “first seen” and “last checked” are our own observations.

OpenNash Jobs · Official listings with dates and links to the employer. [Weekly hiring report](/reports/hiring/) · [Methodology](/methodology/)
