Autodesk
Principal Security & Compliance Analyst
Toronto, ON, CAN · Principal · Full-time
Stay score
odds of building a lasting career here
Thin sponsorship signal and lottery-bound. A low-probability bet with your clock running. Prioritize cap-exempt roles and proven entry-level sponsors first.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Green-card follow-through: 86%
Files H-1B transfers
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- This individual contributor role combines deep technical expertise, independent judgment, and business understanding to strengthen the effectiveness, scalability, and sustainability of the IT control environment supporting financial reporting.
- The ability to assess IT controls in financial reporting environments and communicate effectively with technical stakeholders and management is essential.
Responsibilities
- Lead key aspects of the SOX ITGC program, with end-to-end accountability for assigned control domains, management testing, audit readiness, and continuous improvement initiatives.
- Independently assess the design and operating effectiveness of IT controls supporting financial reporting across on-premises and cloud environments.
- Assess control deficiencies and their business impact, recommend risk-based remediation priorities, and partner with control owners to drive timely and sustainable resolution.
- Partner with Engineering, IT, Security, and Audit & Advisory Services to onboard new systems into SOX scope, translating compliance requirements into effective and scalable controls and operational practices.
- Identify and lead automation and standardization initiatives to reduce redundant activities and improve the efficiency, consistency, and quality of SOX control execution, evidence collection, monitoring, testing, and documentation.
- Lead assigned internal and external audit activities, coordinating evidence requests and testing discussions, providing technical guidance, and resolving complex audit inquiries.
- Independently lead complex cross-functional initiatives from requirements definition and planning through execution, stakeholder adoption, and delivery of measurable outcomes.
Requirements
- 4-5 years of experience in SOX 404 ITGC auditing, IT assurance, security compliance, information security, or a related discipline, including substantial hands-on technical work.
- Strong understanding of SOX 404, IT general controls, financial systems audit requirements, and control design in on-premises and cloud environments.
- Experience assessing security controls, explaining requirements to technical control owners, and influencing decisions across cross-functional stakeholder groups.
- Experience with evidence collection or testing automation and evaluating the sufficiency of evidence for access management, change management, segregation of duties, and configuration management controls.
Nice to have
- Bachelor's degree in Information Technology, Computer Science, Accounting, or related field.
- Professional certification such as CISA, CISSP, CISM, or CPA.
- Experience applying frameworks and standards such as COBIT, NIST, ISO 27001, SOC 2, or PCI DSS to IT control environments.
- Experience with audit and compliance platforms and tools used for control management, automated evidence collection, or continuous monitoring.
- Experience improving compliance processes, leading stakeholder adoption, or reducing duplication in SOX ITGC activities.
- Knowledge of and experience working with SAP, particularly in relation to IT general controls and financial reporting systems.
Compensation
- Competitive salary and comprehensive benefits package.
Benefits
- Competitive salary and comprehensive benefits package.
- Opportunities for professional development and continuous learning.
- Flexible work arrangements.
- In addition to base salaries, our compensation package may include annual cash bonuses, commissions for sales roles, stock grants, and a comprehensive benefits package.
Company info
- Autodesk is seeking an experienced Compliance Analyst to lead key aspects of its Sarbanes-Oxley (SOX) IT General Controls (ITGC) program.
- A successful candidate will take end-to-end ownership of significant ITGC workstreams and initiatives, including onboarding new systems into SOX scope, evaluating controls for systems within SOX scope and improving evidence collection and testing through automation.
- They will interpret complex technical and regulatory requirements, evaluate business and compliance risks, and recommend practical solutions with minimal supervision.
- Working closely with control owners, Engineering, IT, Security, Audit & Advisory Services, and external auditors, this individual will influence technical and control decisions, drive cross-functional outcomes, and help shape the ongoing improvement of Autodesk's SOX ITGC program.
- Serve as a subject matter expert on SOX ITGC requirements, evaluating complex control issues, assessing technical and business risks, and recommending risk-based improvements to strengthen SOX compliance.
Equal opportunity
- Equal Opportunity Employer.
This listing is sourced directly from Autodesk's careers page and normalized into a canonical job model.