SOX Manager

Innovate with purpose At BILL, we believe in empowering the businesses that drive our economy. By replacing outdated financial processes with innovative tools, we help businesses—from startups to established brands—make smarter decisions and gain control of their operations. And we don’t stop there: we’re creating the future of financial automation so businesses can spend more time on what matters. Working here means you become part of a vision-driven team that’s ready to tackle challenges and build cutting-edge solutions. We value purpose, drive, and curiosity—and we thrive in a fast-paced, ever-changing environment. Whether in one of our offices in San Jose, CA, Draper, UT, or in a remote-eligible role, BILLders collaborate to deliver real impact for businesses that need more time in their busy weeks. BILL builds high performing teams and we seek to hire the best talent for every role. We're committed to building a workplace that fosters inclusion and diverse perspectives, valuing each person’s unique skills and experiences. We’d love to hear from you—you might be just what we’re looking for, whether in this role or another. ✨ Let’s give businesses more time for what matters. The SOX Manager for Business Process and IT Application Controls (ITAC) is a critical, highly visible role on the Finance team responsible for the day-to-day execution and continuous improvement of the company’s Sarbanes-Oxley (SOX) Section 404 compliance program. As our business experiences tremendous growth, this individual will act as a key partner to business process and ITAC owners, ensuring a robust Internal Control over Financial Reporting (ICFR) environment and be responsible for working with different business stakeholders on maintaining the SOX controls. The ideal candidate is a motivated, self-starting leader with a strong background in public accounting and internal controls. You will not just manage compliance, but actively drive process optimization, automation, and cross-functional risk management. Essential Duties and Responsibilities SOX Program Management & Execution Lifecycle Management: Lead the execution of the annual SOX compliance lifecycle for business processes and ITAC, including scoping, risk assessment, documentation (narratives, flowcharts, Risk & Control Matrices), testing coordination, and deficiency remediation. Risk Assessment & Scoping: Perform the annual qualitative and quantitative risk assessment to identify significant accounts, relevant assertions, and key controls, proactively adjusting the SOX scope to reflect business growth or process changes. Audit Coordination: Serve as the business process and ITAC primary point of contact and liaison between management, control owners, Internal Audit, and the External Auditors for all SOX-related matters to ensure a co-ordinated, efficient, and cost-effective audit process. Deficiency Management: Evaluate control deficiencies/process enhancements and partner closely with business process and ITAC owners to develop actionable remediation plans and track progress to ensure timely resolution. Process Optimization & Cross-Functional Partnership Control Rationalization: Drive a continuous improvement mindset by identifying opportunities to streamline operations, eliminate redundant controls, and increase the utilization of automated controls or GRC tools. Stakeholder Engagement: Act as a trusted advisor to business process and ITAC owners providing guidance, coaching, and training on control responsibilities. Change Management: Proactively assess and manage the SOX impact of new financial systems, workflow updates, or corporate transformation initiatives. Policy & Standardization: Support the development and alignment of policies to ensure harmonized processes across all business units. Audit Coordination & Reporting Audit Liaison: Serve as the business process and ITAC primary point of contact and liaison between management, control owners, Internal Audit, and the External Auditors for all SOX-related matters (e.g. walkthroughs, evidence gathering, follow-ups) to ensure seamless, cost-effective audit process. PMO & Auditor Management: Manage the SOX project timeline, tracking milestones and managing external auditors, as needed. Status Reporting: Prepare regular status updates, control deficiency summaries, and remediation progress reports for management. Required Professional Experience & Qualifications Education: Bachelor’s degree in Accounting, Finance, or a related field. Big 4 Experience Requirement: Minimum of 6+ years of progressive experience in Big 4 public accounting (Audit or Risk Advisory), specifically focused on SOX 404 audits and ICFR for large accelerated filers. Strong familiarity with high-growth environments (Fintech or technology sector experience is a major plus). Certifications: Active Certified Public Accountant (CPA) or Certified Internal Auditor (CIA) is strongly preferred. CISA is a plus. Technical Knowledge: Deep understanding of SOX Section 404 requirements, the COSO framework, and PCAOB auditing standards. Systems Familiarity: Experience navigating and evaluating controls within major ERP and enterprise systems (e.g., NetSuite) is highly desirable. Key Competencies for Success Analytical Thinking: Strong conceptual and problem-solving skills with meticulous attention to detail. Project Leadership: Proven ability to manage multiple projects simultaneously, manage timelines, and deliver high-quality results under pressure. Collaborative Communication: Excellent interpersonal and communication skills, with the ability to translate complex control requirements into clear, actionable guidance for non-financial stakeholders. Autonomy: A self-starter who can work independently while maintaining strong alignment with a broader team goal. Visa Sponsorship: Please note that this position is not eligible for visa sponsorship. Applicants must have authorization to work in the United States without requiring visa sponsorship now or in the future. Our ranges for each role and job level are based on a variety of factors including candidate experience, expertise, and geographic location and may vary from the amounts listed below. The role is also eligible for a competitive benefits package that includes: medical, dental, vision, life and disability insurance, 401(k) retirement plan, flexible spending & health savings account, paid holidays, paid time off, and other company benefits. The estimated salary ranges noted below roles in the specific geographic zones Zone 1- San Francisco Bay Area CA (includes HQ), New York City, Seattle, Los Angeles County $114,400—$142,500 USD Zone 2- CA (Non San Francisco Bay Area and Los Angeles County), Austin TX, Massachusetts $103,000—$128,200 USD Zone 3 -Utah (includes Utah office), Houston TX, Florida, North Carolina $97,200—$121,100 USD What’s in it for you? Redefining how businesses automate their work is a fast-paced, exciting, and fun environment. But we also have benefits and perks to ensure the magic isn’t only experienced by our customers, but by our employees as well. Here is a preview of some of the amazing benefits here at BILL: 100% paid employee health, dental, and vision plans (choose HMO, PPO, or HDHP) HSA & FSA accounts Life Insurance, Long & Short-term disability coverage Employee Assistance Program (EAP) 11+ Observed holidays and wellness days and flexible time off Employee Stock Purchase Program with employee discounts Wellness & Fitness initiatives Employee recognition and referral programs And much more Don’t believe us? Check out our culture, benefits, and teams on our career site, LinkedIn Life, or YouTube pages. BILL is an Equal Opportunity Employer. We believe our best ideas come from the unique stories, perspectives, and experiences of our team members. We welcome people of all backgrounds, abilities, and identities to bring their authentic selves and contribute to our culture. We are committed to a transparent, inclusive hiring process that reflects our values. If you need accommodations at any stage, please contact interviewaccommodations@hq.bill.com. To ensure a fair evaluation, our Candidate Integrity Policy prohibits the use of unapproved external assistance, including generative AI, during live interviews or assessments. Doing so will result in a review and potential disqualification. Our Applicant Privacy Notice describes how BILL treats the personal information it receives from applicants.