Principal, SOX and MAR

The Principal operates within the SOX PMO as a management governance and execution role. Process and control owners remain accountable for control design, execution, evidence, certification, and remediation. The SOX PMO establishes and administers the program framework and standards. Internal Audit independently tests controls and provides independent assurance.

The Principal is authorized to manage routine program execution and enforce approved SOX PMO standards, while escalating material scoping decisions, methodology changes, deficiency classifications, unresolved stakeholder matters, and other risk-significant judgments to the Director, SOX PMO.

• Coordinate execution alignment with the parent company’s consolidated SOX program, including applicable methodology, scoping, documentation, certification, and reporting requirements, and escalate potential alignment issues to the Director.
• Maintain the annual SOX program calendar, including key planning, walkthrough, testing readiness, deficiency evaluation, remediation, certification, and reporting milestones.
• Serve as the day-to-day program execution lead, developing governance documents, maintaining program trackers, coordinating deliverables, preparing status materials, and escalating risks, delays, and decision points to the Director, SOX PMO.
• Drive governance over both business process and IT-dependent controls by promoting adherence to program standards, methodologies, and documentation requirements.
• Identify opportunities to enhance program effectiveness, efficiency, and scalability through process improvements and automation initiatives.
• Apply SOX, ICFR, and COSO expertise to guide day-to-day program execution, documentation, and stakeholder decisions.

• Lead execution of the annual SOX risk assessment process, including analysis of significant accounts, applications, disclosures, financial reporting risks, fraud risks, and changes impacting in-scope processes, systems, reports and third-party service providers, with recommendations prepared for Director review and approval.
• Evaluate business, operational, and technology changes for potential SOX impacts, including MAR considerations and governance of entity-level controls (ELC).
• Govern SOX content and change control within the GRC platform by developing and maintaining program standards, reviewing risk-significant changes and facilitating approval through the SOX PMO governance process.
• Partner with control owners to help confirm risks, controls, applications, evidence, deficiencies, and remediation plans remain current, accurate, and audit ready.

• Lead reviews of process narratives, flowcharts, and risk-and-control matrices (RCMs) for quality, consistency, and compliance with SOX methodology.

• Partner and drive follow-through with Finance, Actuarial, Claims, Underwriting, Premium, Reinsurance, Treasury, Tax, Technology, and other functional leaders to strengthen control design and execution.
• Lead documentation-quality and readiness reviews for financial-close controls, including journal entries, account reconciliations, financial reporting, and disclosure-related controls.

• Provide guidance and challenge around Management Review Controls (MRCs), evidence standards, precision of review, and documentation quality consistent with PCAOB expectations and industry best practices.
• Perform quality reviews of SOX documentation, including RCMs, narratives, walkthroughs, control evidence, and issue documentation to promote accuracy, consistency, completeness, and audit readiness.

• Coordinate governance over IT General Controls (ITGCs) with technology stakeholders, including logical access, change management, computer operations, and system development lifecycle controls for in-scope systems.
• Develop and maintain standards for automated application controls, system-generated reports, and Information Produced by the Entity (IPE), including design and documentation adequacy.
• Govern third-party service provider control considerations, including SOC report reviews, bridge letter monitoring, complementary user entity control evaluation, gap assessment, and remediation tracking.
• Coordinate with AI Governance and Third-Party Risk Management functions to evaluate control implications arising from cloud technologies, robotic process automation, artificial intelligence, and other emerging technologies.

• Execute key components of the company’s MAR program and maintain statutory ICFR documentation.
• Operate MAR as an integrated extension of SOX by leveraging the same control inventory, walkthroughs, and evidence within the GRC platform, while coordinating statutory-specific risk and control assessments where requirements differ from SOX.
• Maintain complete and accurate lineage within the GRC platform from financial statement account and assertion to risk, control, owner, system or report, evidence, deficiency, and remediation activity.
• Coordinate quarterly and annual management certification activities, including control owner readiness, evidence completeness, deficiency status, disclosure considerations, and preparation of supporting materials for Director review.
• Prepare and maintain documentation supporting Management’s Report of Internal Control over Financial Reporting.
• Conduct SOX impact assessments for changes arising from NAIC and DOI guidance and recommend program enhancements or control framework adjustments, as appropriate.

• Lead and coordinate deficiency intake, documentation, root-cause analysis, remediation tracking, and retest-readiness activities. Prepare severity, aggregation, disposition, reporting, and stakeholder-communication considerations for Director review and approval, in coordination with Internal Audit and relevant control owners.
• Partner and constructively challenge control owners to develop outcome-based remediation plans, monitor milestones, and confirm management readiness for retest by Internal Audit.

• Coordinate day-to-day interactions with Internal Audit and External Audit, including walkthrough scheduling, evidence requests, status follow-ups, and resolution of execution-level questions; escalate judgmental, strategic, or risk-significant matters to the Director, SOX PMO.
• Manage day-to-day stakeholder engagement across Finance, Technology, Compliance, Risk, and business operations to drive timely execution of SOX deliverables.
• Present observations, recommendations, and program updates to management and leadership forums.

• Serve as a thought leader and trusted advisor on SOX technical matters, including PCAOB and SEC expectations.
• Leverage Artificial Intelligence and emerging technologies to lead execution of approved control optimization, automation, analytics, and continuous monitoring initiatives, including identifying candidate controls, coordinating with stakeholders, documenting changes, and implementation readiness.
• Monitor business, process, technology, organizational, and system changes to identify potential SOX impacts and prepare impact assessments for Director review.

• Further the culture of candor, ownership, and continuous improvement aligned with the Controller’s values.

• 8+ years of progressive experience in SOX program management, Internal Audit, or a related compliance function in a public company or large complex organization.
• Bachelor’s degree in Accounting, Finance, Information Systems, Business Analytics, or related field.
• Strong knowledge of SOX Sections 302 and 404, COSO Internal Control Framework, PCAOB AS 2201, and SEC interpretive guidance on ICFR.
• Demonstrated expertise with scoping, walkthroughs, risk assessments, issue remediation, maintaining controls, ITGCs, and automated controls.
• Experience with artificial intelligence, SDLC, Agile, Lean Six Sigma, continuous improvement, data analytics, automation, or technology-enabled control transformation.
• Proven ability to collaborate with and influence senior stakeholders, drive cross-functional initiatives independently, and escalate risks or decision points effectively.
• Ability to operate independently with limited supervision, manage competing priorities, and consistently deliver high-quality work within established timelines.
• Excellent written and verbal communication, analytical, advanced Excel, project management, and documentation skills.

• Professional certification such as CPA, CIA, CISA, CFE, CERP, or CISM.
• Experience with Agile, Lean Six Sigma, data analytics, visualization tools (e.g., Power BI, Tableau), and SQL.
• Property & Casualty insurance industry experience.
• Experience supporting statutory financial reporting and MAR compliance controls.
• Prior experience in consulting, Big Four or large public accounting firm.
• Experience with AuditBoard/SOXHUB or comparable GRC platforms such as Workiva, Archer, or ServiceNow GRC.
• Experience leading control automation, controls analytics, and emerging technology risk initiatives.
• Familiarity with NAIC, NYDFS, and state DOI expectations as they relate to internal controls and corporate governance disclosures (e.g., CGAD).

Annual Salary

The above annual salary range is a general guideline. Multiple factors are taken into consideration to arrive at the final hourly rate/ annual salary to be offered to the selected candidate. Factors include, but are not limited to, the scope and responsibilities of the role, the selected candidate’s work experience, education and training, the work location as well as market and business considerations.

The GEICO Pledge:

Great Company: Protecting customers through life’s twists and turns with innovation and integrity.

Great Careers: Personalized development programs, mentorship, and certification assistance.

Great Culture: Inclusive and collaborative culture rooted in shared success.

Great Rewards: Competitive pay, benefits, and flexibility to support your well-being and future.

The equal employment opportunity policy of the GEICO Companies provides for a fair and equal employment opportunity for all associates and job applicants regardless of race, color, religious creed, national origin, ancestry, age, gender, pregnancy, sexual orientation, gender identity, marital status, familial status, disability or genetic information, in compliance with applicable federal, state and local law. GEICO hires and promotes individuals solely on the basis of their qualifications for the job to be filled.

GEICO reasonably accommodates qualified individuals with disabilities to enable them to receive equal employment opportunity and/or perform the essential functions of the job, unless the accommodation would impose an undue hardship to the Company. This applies to all applicants and associates. GEICO also provides a work environment in which each associate is able to be productive and work to the best of their ability. We do not condone or tolerate an atmosphere of intimidation or harassment. We expect and require the cooperation of all associates in maintaining an atmosphere free from discrimination and harassment with mutual respect by and for all associates and applicants.