Loading...
SeniorFull-timeAWS
Salary Range
$26,520 - $35,880 /year
This salary is estimated based on similar roles. The actual salary may vary.
About the Role
Poshmark is seeking a Senior Security Engineer, GRC to support the company’s Korea-specific Sarbanes-Oxley (K-SOX) compliance program and broader Cybersecurity Governance, Risk, and Compliance (GRC) initiatives. This role will ensure effective internal controls over financial reporting (ICFR) and contribute to various compliance and security-related activities.
Key Responsibilities
- →Support the annual K-SOX compliance lifecycle, including scoping, risk assessment, testing, remediation, and reporting
- →Perform Design Effectiveness (DE) and Operating Effectiveness (OE) testing for IT Application Controls and IT General Controls
- →Maintain and update K-SOX documentation, including process narratives, Risk & Control Matrices (RCMs), and flowcharts
- →Identify control deficiencies and support severity assessment
- →Track and validate remediation activities in coordination with control owners
- →Act as a key liaison between business/control owners, Internal Audit, and External Auditors
- →Coordinate walkthroughs, testing schedules, and audit evidence requests
- →Respond to audit inquiries and support PBC requests
- →Assist with closure of audit findings and validation of remediation effectiveness
- →Support additional compliance and risk initiatives beyond SOX, including PCI-DSS compliance activities and data privacy and regulatory support
- →Assist with control mapping across multiple frameworks as required
- →Support internal policy, standards, and technical risk assessment activities
- →Take on non-SOX GRC or compliance work during non-peak SOX cycles
- →Create executive summary, presentation, and other reports as needed
- →Participate in process improvement initiatives to enhance control efficiency and reduce audit effort
- →Identify opportunities to automate, standardize, or rationalize controls and evidence collection
- →Build and maintain compliance trackers, dashboards and metrics, and management and audit-ready reports
- →Prepare clear written documentation and presentations for management, auditors, and stakeholders
- →Leverage scripting, data analysis, or tooling where appropriate to improve reporting quality and efficiency
Requirements
- ✓4–7 years of experience in SOX / K-SOX compliance, Internal Audit, GRC, or External Audit (Big 4 or equivalent preferred)
- ✓Hands-on experience with ICFR and SOX 404–type controls, IT General Controls, and IT Application Controls
- ✓Experience supporting public or listed companies
- ✓Ability to operate independently with minimal supervision
- ✓Strong understanding of COSO Internal Control Framework and SOX / K-SOX compliance requirements
- ✓Experience with enterprise technology platforms such as Oracle NetSuite, OKTA, JIRA, AWS
- ✓Strong proficiency in Excel (trackers, pivots, evidence analysis)
- ✓Experience creating reports, dashboards, and presentations
- ✓Exposure to scripting, automation, or data analysis is a plus
- ✓Strong analytical and problem-solving skills
- ✓Excellent written and verbal communication
- ✓Ability to manage multiple priorities in a deadline-driven environment
- ✓Comfortable working cross-functionally with Technology, Finance, Security, and Operations
- ✓High attention to detail, ownership mindset, and professional skepticism
Free to sign up. Takes 30 seconds.
