Product Manager, Compliance

<div class="content-intro"><div> <div> <div class="gmail_quote"> <div> <div><span id="m_1770241969069985273m_-2746164444908759431gmail-docs-internal-guid-131e4fb0-7fff-b4e9-ff50-e8cf32449b1b">CoreWeave is The Essential Cloud for AI™. Built for pioneers by pioneers, CoreWeave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence. Trusted by leading AI labs, startups, and global enterprises, CoreWeave combines superior infrastructure performance with deep technical expertise to accelerate breakthroughs and turn compute into capability. Founded in 2017, CoreWeave became a publicly traded company (Nasdaq: CRWV) in March 2025. Learn more at <a href="http://www.coreweave.com/" target="_blank" data-saferedirecturl="https://www.google.com/url?q=http://www.coreweave.com&source=gmail&ust=1762613132717000&usg=AOvVaw3D-UOhNaqEvF5BEWxjYyAU">www.coreweave.com</a>.</span></div> </div> </div> </div> </div></div><h2 class="wnfdnti _1ibi0s35e _1ibi0s36a">About the Role</h2> <p class="wnfdntu _1ibi0s3fd _1ibi0s3ce _1ibi0s3eg">This is not a traditional audit-support role. As the Product Manager, IT SOX Compliance, you’ll translate SOX compliance requirements into structured programs, drive accountability across IT process owners, and build the systems and workflows that make compliance scalable. You’ll work closely with the SOX team and IT process owners to ensure controls are designed, reviewed, executed, and evidenced effectively.</p> <h2 class="wnfdnti _1ibi0s35e _1ibi0s36a" data-pm-slice="1 1 []">What You’ll Do</h2> <ul> <li class="wnfdntu _1ibi0s3fd _1ibi0s3ce _1ibi0s3eg">Own the end-to-end IT SOX compliance program within the CIO organization, including the IT control inventory covering ITGCs, IT-dependent controls, and automated application controls.</li> <li class="wnfdntu _1ibi0s3fd _1ibi0s3ce _1ibi0s3eg">Translate SOX compliance requirements into structured programs, processes, and scalable workflows that drive accountability and improve execution.</li> <li class="wnfdntu _1ibi0s3fd _1ibi0s3ce _1ibi0s3eg">Own control design and documentation, including control narratives, risk and control matrices (RCMs), and supporting procedures, ensuring controls are clearly defined and audit-ready.</li> <li class="wnfdntu _1ibi0s3fd _1ibi0s3ce _1ibi0s3eg">Partner with IT, Accounting as needed, and the SOX team to ensure new systems and modules are implemented with appropriate SDLC controls before go-live. Review control designs early to identify and mitigate SOX risks before implementation.</li> <li class="wnfdntu _1ibi0s3fd _1ibi0s3ce _1ibi0s3eg">Partner with IT process owners and control operators to ensure controls are executed consistently and on time.</li> <li class="wnfdntu _1ibi0s3fd _1ibi0s3ce _1ibi0s3eg">Build and improve the systems, workflows, and reporting used to manage control execution, evidence collection, issue tracking, and compliance visibility.</li> <li class="wnfdntu _1ibi0s3fd _1ibi0s3ce _1ibi0s3eg">Review control evidence for quality, completeness, and alignment with control requirements before submission to auditors.</li> <li class="wnfdntu _1ibi0s3fd _1ibi0s3ce _1ibi0s3eg">Manage the full deficiency lifecycle—from root cause analysis through remediation planning, retesting, and escalation—and report control health to IT leadership and the SOX team.</li> <li class="wnfdntu _1ibi0s3fd _1ibi0s3ce _1ibi0s3eg">Lead root cause analyses for control failures and incidents, track and resolve systemic gaps, and implement and validate remediation plans that drive durable improvements and prevent recurrence.</li> </ul> <h2 class="wnfdnti _1ibi0s35e _1ibi0s36a">Who You Are</h2> <ul> <li class="wnfdntu _1ibi0s3fd _1ibi0s3ce _1ibi0s3eg">6+ years of experience in IT audit, IT risk, IT compliance, or a related field, with hands-on IT SOX experience in either a practitioner or oversight capacity.</li> <li class="wnfdntu _1ibi0s3fd _1ibi0s3ce _1ibi0s3eg">Deep familiarity with IT General Controls (ITGCs), including access management, change management, SDLC, and computer operations, and how they map to financial reporting risk.</li> <li class="wnfdntu _1ibi0s3fd _1ibi0s3ce _1ibi0s3eg">Experience supporting enterprise business systems such as Workday, Salesforce, NetSuite or SAP, Coupa, and similar platforms.</li> <li class="wnfdntu _1ibi0s3fd _1ibi0s3ce _1ibi0s3eg">Strong understanding of PCAOB auditing standards, the COSO framework, and COBIT as they apply to IT controls.</li> <li class="wnfdntu _1ibi0s3fd _1ibi0s3ce _1ibi0s3eg">Demonstrated ability to manage multiple workstreams, deadlines, and stakeholders across engineering, finance, legal, and audit.</li> <li class="wnfdntu _1ibi0s3fd _1ibi0s3ce _1ibi0s3eg">Experience with GRC platforms such as AuditBoard, ServiceNow GRC, Workiva, or similar tools.</li> <li class="wnfdntu _1ibi0s3fd _1ibi0s3ce _1ibi0s3eg">Excellent written communication skills, with the ability to produce clear, auditor-ready documentation and translate technical concepts for non-technical stakeholders.</li> <li class="wnfdntu _1ibi0s3fd _1ibi0s3ce _1ibi0s3eg">Comfortable working in fast-moving, ambiguous environments with a builder’s mindset.</li> </ul> <h4 class="wnfdnti _1ibi0s35e _1ibi0s36a">Preferred</h4> <ul> <li class="wnfdntu _1ibi0s3fd _1ibi0s3ce _1ibi0s3eg">CISA, CISSP, CISM, or CPA certification.</li> <li class="wnfdntu _1ibi0s3fd _1ibi0s3ce _1ibi0s3eg">Experience in a hyperscaler, cloud infrastructure, or high-growth technology environment.</li> <li class="wnfdntu _1ibi0s3fd _1ibi0s3ce _