Autodesk

Autodesk

Principal Security & Compliance Analyst

Toronto, ON, CAN · Principal · Full-time

Sponsorship not specifiedDetected 7 days ago
CybersecurityComplianceStakeholder ManagementFinancial AnalysisAccountingSAPAuditingCommunicationProblem SolvingMentoringSarbanes-OxleyFinancial ReportingInternal AuditCISSP

Stay score

odds of building a lasting career here

38Risky
Cap-exempt (no lottery)0
Sponsors this role85
Entry-level history0
PERM / green-card track0
Lottery odds40
Fits your clock70

Thin sponsorship signal and lottery-bound. A low-probability bet with your clock running. Prioritize cap-exempt roles and proven entry-level sponsors first.

Lottery odds assume a STEM candidate.

Personalize to your clock →

Employer immigration record

from this employer's Department of Labor filings

Green-card follow-through: 86%

Of 29 labor certifications old enough to have been used, 4 expired without the employer filing the next step. Median time from filing to decision: 483 days.100% of their filings were for a worker who already held the job.Only certifications past the 180-day window are counted — recent ones cannot have expired yet.

Files H-1B transfers

12 transfer filings in the last year, covering 12 workers. Median labor-condition decision: 7 days. An employer that already files transfers is one that can take over an existing H-1B.

Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.

Community outcomes

No reports yet — be the first to help the next applicant.

About the role

  • This individual contributor role combines deep technical expertise, independent judgment, and business understanding to strengthen the effectiveness, scalability, and sustainability of the IT control environment supporting financial reporting.
  • The ability to assess IT controls in financial reporting environments and communicate effectively with technical stakeholders and management is essential.

Responsibilities

  • Lead key aspects of the SOX ITGC program, with end-to-end accountability for assigned control domains, management testing, audit readiness, and continuous improvement initiatives.
  • Independently assess the design and operating effectiveness of IT controls supporting financial reporting across on-premises and cloud environments.
  • Assess control deficiencies and their business impact, recommend risk-based remediation priorities, and partner with control owners to drive timely and sustainable resolution.
  • Partner with Engineering, IT, Security, and Audit & Advisory Services to onboard new systems into SOX scope, translating compliance requirements into effective and scalable controls and operational practices.
  • Identify and lead automation and standardization initiatives to reduce redundant activities and improve the efficiency, consistency, and quality of SOX control execution, evidence collection, monitoring, testing, and documentation.
  • Lead assigned internal and external audit activities, coordinating evidence requests and testing discussions, providing technical guidance, and resolving complex audit inquiries.
  • Independently lead complex cross-functional initiatives from requirements definition and planning through execution, stakeholder adoption, and delivery of measurable outcomes.

Requirements

  • 4-5 years of experience in SOX 404 ITGC auditing, IT assurance, security compliance, information security, or a related discipline, including substantial hands-on technical work.
  • Strong understanding of SOX 404, IT general controls, financial systems audit requirements, and control design in on-premises and cloud environments.
  • Experience assessing security controls, explaining requirements to technical control owners, and influencing decisions across cross-functional stakeholder groups.
  • Experience with evidence collection or testing automation and evaluating the sufficiency of evidence for access management, change management, segregation of duties, and configuration management controls.

Nice to have

  • Bachelor's degree in Information Technology, Computer Science, Accounting, or related field.
  • Professional certification such as CISA, CISSP, CISM, or CPA.
  • Experience applying frameworks and standards such as COBIT, NIST, ISO 27001, SOC 2, or PCI DSS to IT control environments.
  • Experience with audit and compliance platforms and tools used for control management, automated evidence collection, or continuous monitoring.
  • Experience improving compliance processes, leading stakeholder adoption, or reducing duplication in SOX ITGC activities.
  • Knowledge of and experience working with SAP, particularly in relation to IT general controls and financial reporting systems.

Compensation

  • Competitive salary and comprehensive benefits package.

Benefits

  • Competitive salary and comprehensive benefits package.
  • Opportunities for professional development and continuous learning.
  • Flexible work arrangements.
  • In addition to base salaries, our compensation package may include annual cash bonuses, commissions for sales roles, stock grants, and a comprehensive benefits package.

Company info

  • Autodesk is seeking an experienced Compliance Analyst to lead key aspects of its Sarbanes-Oxley (SOX) IT General Controls (ITGC) program.
  • A successful candidate will take end-to-end ownership of significant ITGC workstreams and initiatives, including onboarding new systems into SOX scope, evaluating controls for systems within SOX scope and improving evidence collection and testing through automation.
  • They will interpret complex technical and regulatory requirements, evaluate business and compliance risks, and recommend practical solutions with minimal supervision.
  • Working closely with control owners, Engineering, IT, Security, Audit & Advisory Services, and external auditors, this individual will influence technical and control decisions, drive cross-functional outcomes, and help shape the ongoing improvement of Autodesk's SOX ITGC program.
  • Serve as a subject matter expert on SOX ITGC requirements, evaluating complex control issues, assessing technical and business risks, and recommending risk-based improvements to strengthen SOX compliance.

Equal opportunity

  • Equal Opportunity Employer.

This listing is sourced directly from Autodesk's careers page and normalized into a canonical job model.