Senior Internal Auditor and Sox Compliance
Job Level: Mid-level
Location: Orem, UT preferred, remote available
About SunPower: SunPower’s mission is to provide industry leading, innovative, end-to-end solar energy solutions with exceptional customer service. With over 30 years of experience in the US Residential Solar industry, we deliver an all-in-one solar solution that supports the transition to clean energy.
SunPower continues to grow through strategic acquisitions of leading solar companies. These have included SunPower, Blue Raven Solar, Complete Solar, and Sunder Energy. These transitions bring together the strengths, expertise, and shared commitment to making clean energy simpler and more accessible for everyone.
Benefits:
- Employee RSU Awards program
- Quarterly & Annual bonus program (based on performance)
- Competitive coverage for Health, Dental, and Vision insurance
- PTO/DTO for full-time employees
- 10 paid holidays
Position Summary:
The Senior Internal Auditor – SOX Compliance will play a key role in the Company’s SOX compliance and Internal Audit program, with primary responsibility for executing risk-based SOX testing, evaluating internal controls over financial reporting (ICFR), identifying control gaps, and supporting timely remediation. The position partners with Accounting, Finance, IT, Legal, HR, Operations, and external auditors to strengthen the control environment and promote sustainable, scalable controls.
Essential Duties:
- Execute the annual SOX 404 program in line with COSO and Company policies, including walkthroughs, risk/control-gap identification, and testing of key controls for design and operating effectiveness.
- Maintain SOX documentation (RCMs, narratives, flowcharts, control descriptions, and workpapers), and evaluate deficiencies, severity, and remediation with follow-up testing.
- Perform risk-based financial and operational audits across core cycles (Procure-to-Pay, Order-to-Cash, Revenue Recognition, Close & Reporting, Treasury, Payroll/Hire-to-Retire, Fixed Assets, Inventory, Commissions, Equity Compensation, Forecasting, and Expense Management), including compliance, fraud-risk, and process-improvement reviews.
- Test IT general and application controls—access/provisioning/termination, periodic and privileged access reviews, segregation of duties, change management, automated controls, interfaces, system-generated calculations, IT-dependent controls, and IPE—across ERP and business systems (NetSuite, Salesforce, Paycom).
- Contribute to annual enterprise and SOX risk assessments, identify emerging risks, and support development of the Internal Audit plan, including risks from new systems, processes, acquisitions, and organizational change.
- Apply data analytics and continuous monitoring to expand coverage, perform population-based testing, detect anomalies, and build dashboards and recurring monitoring procedures, leveraging approved automation and AI tools.
- Document findings, perform root-cause analysis, partner with management on corrective actions, and track/escalate issues through validation.
- Coordinate with external auditors, providing SOX evidence and supporting alignment on key controls, testing strategy, sampling, deficiencies, and remediation.
- Provide Internal Audit input on major system implementations and upgrades (e.g., NetSuite SOX readiness), assess controls in new systems and processes, and identify opportunities to automate manual controls and improve efficiency.
Minimum Qualifications:
- Bachelors degree in Accounting, Finance, Internal Audit, Information Systems, or related field.
- 4-7 years of progressive Internal Audit, SOX, public accounting, or related experience.
- Strong understanding of SOX Section 404 and COSO.
- Experience with walkthroughs, control testing, and audit workpapers.
- Public company SOX and Big 4 experience preferred.
- ITGC, application controls, ERP, and day analytics experience preferred.
Critical Success Factors:
- Execute high-quality SOX testing on time.
- Identify root causes, not just symptoms.
- Build strong relationships while maintaining Internal Audit independence.
- Support sustainable remediation and system implementations
- Leverage analytics and automation to expand audit coverage.
- Maintain strong external auditor relationships.
- Help evolve SOX from a compliance exercise into a sustainable risk and control framework.
While performing the duties of this job, the employee is regularly required to talk or hear. Regular periods of sitting or standing may be required by this position. In addition, this position requires the ability to occasionally lift office products and supplies, up to 50 pounds. Specific vision abilities required by this job include close vision and ability to adjust focus.