DIO Risk Management Scholar
Equinix is the world's digital infrastructure company, shortening the path to connectivity to enable the innovations that enrich our work, life, and planet. A place where bold ideas are welcomed, human connection is valued, and everyone has the opportunity to shape their future. A career at Equinix means being at the center of shaping what comes next and amplifying customer value through innovation and impact. You'll work across teams, influence key decisions, and help shape the path forward. You'll find belonging, purpose, and a team that welcomes youbecause when you feel valued, you're empowered to do your best work.
Job Summary
The DIO Risk Management Scholar is a senior-level member of the Governance, Risk and Compliance (GRC) function within the Digital & Innovation Office (DIO). This role provides oversight, guidance, and coordination for DIO's SOX IT compliance program while supporting broader risk management efforts across cybersecurity, infrastructure, cloud, data governance, AI governance, and application rationalization. This individual is responsible for driving compliance, risk oversight, and strategic risk management across DIO's technology environment. The role covers SOX IT compliance, cybersecurity and IT governance oversight, data governance, AI governance, and infrastructure risk assessments. The DIO Risk Management Scholar is responsible for overseeing the organization's compliance with the Sarbanes-Oxley Act (SOX) as it pertains to information technology systems and processes. This role involves developing, implementing, and monitoring all audit processes for the DIO at Equinix including internal and external auditors. This role will collaborate with various departments to foster a culture of compliance and mitigate risks associated with IT systems.
Responsibilities
- Develop and Implement Controls : Design, implement, and maintain IT controls in accordance with SOX requirements, focusing on access controls, data integrity, change management, and system security.
- Risk Assessment : Conduct regular risk assessments to identify vulnerabilities in IT systems that could impact financial reporting. Evaluate the effectiveness of existing controls and recommend improvements.
- Documentation and Reporting : Maintain comprehensive documentation of IT policies, procedures, and controls. Prepare and present compliance reports to senior management and the audit committee.
- Collaboration : Work closely with finance, internal audit, and other relevant departments to ensure a cohesive approach to compliance. Facilitate communication and training on SOX requirements and IT controls.
- Monitoring and Testing : Oversee the ongoing monitoring and testing of IT controls to ensure they are functioning effectively. Coordinate with internal or external auditors during SOX audits.
- Incident Management : Develop and implement procedures for responding to incidents that may affect compliance, including data breaches or control failures. Ensure incidents are documented and addressed promptly.
- Training and Awareness : Provide training and resources to staff on SOX compliance and the importance of internal controls. Foster a culture of compliance within the organization.
- Stay Current : Keep abreast of changes in SOX regulations and best practices in IT compliance. Adapt the organization's compliance strategies accordingly.
Qualifications
Education & Experience
Bachelor's degree in Information Technology, Computer Science, Accounting, Finance, or related field5+ years of progressive experience in IT audit, IT SOX compliance, technology risk management, or related areasBig Four public accounting or consulting experience is a plusExperience partnering with senior leadership on risk management initiativesDeep understanding of cybersecurity, infrastructure, cloud technologies, data governance, AI governance, and application rationalization, with the ability to assess risks, guide best practices, and support the design of scalable, compliant, and secure technology environmentsCertifications (Preferred) : CISA, CISSP, CRISC, or similar professional certificationsTechnical Knowledge
Expertise in ITGCs, key application controls, and technology risk assessment methodologiesFamiliarity with cloud technologies, infrastructure platforms, and security architecturesKnowledge of industry frameworks such as COBIT, NIST CSF, ISO 27001, ITIL, and CIS BenchmarksCore Leadership Skills
Strategic thinker who can connect operational risks to enterprise objectivesExceptional communicator, able to clearly convey technical risk to senior executivesStrong facilitation and negotiation skills to influence without direct authorityProven track record of building relationships and driving collaboration across diverse teamsAbility to navigate complex, fast-paced environments and make informed decisions under pressure