Technology Internal Controls Supervisor This position is responsible for managing personnel and functions surrounding Southern Company’s technology-related Sarbanes-Oxley (SOX) controls, ensuring all control objectives are achieved to support management’s SOX 404 certification. JOB REQUIREMENTS • Bachelor’s degree in Computer Science / Information Security, Information Systems, Accounting or related field required • Certified Information Systems Auditor (CISA), Certified Risk and Information Security Controls (CRISC) certifications or related industry certifications preferred. • Minimum of six years’ experience in financial applications support, technology risk, or compliance (financial controls, technology controls or audit) required. • Strong working knowledge of SOX/internal control concepts and evidence standards as well as application security concepts. • Ability to effectively apply technology knowledge to evaluate SOX control impact and risk associated with key financial applications (KFA), key financial tools (KFTs), and segregation of duties. • Have general understanding accounting concepts and requirements to determine appropriate risk levels of applications and related tools to financial reporting. • Leadership experience preferred, including performance management and employee development. • Excellent interpersonal, analytical, and organizational skills. • Superior communication skills, both verbal and written to engage, build credibility and maintain relationships with business partners. • Ability to initiate and manage multiple complex projects. • Demonstrate behaviors consistent with company culture – Safety First, Intentional Inclusion, Act with Integrity, Superior Performance. • Familiarity with Oracle products and Workiva software a plus. MAJOR JOB RESPONSIBILITIES: • Provide leadership in the following areas to support the company’s SOX compliance: • Annual SOX risk assessment, scoping and planning for IT-related controls (automated controls, general computing controls, and logical access). • Evaluate the design and operating effectiveness of IT-related controls, including controls around key reports (information used in controls). • Evaluate and document IT SOX control deficiencies, including severity assessment, root cause analysis, exposure analysis, and remediation plans. • Quarterly/annual control certification for IT-related controls. • Assess new applications and tools and/or changes to existing applications and tools for SOX impact. • Provide internal controls leadership for application and tool implementations. • Facilitate the annual SSAE 18 (SOC report) assessments and segregation of duties (SOD) analysis. • Build and maintain strong relationships with control owners and performers in IT and business departments, internal auditors, and external auditors to further enable common goals and efficiencies. • Identify and implement innovative solutions to achieve process efficiencies around controls testing. • Develop and coach direct reports.