Second Line of Defense Business Process Controls Supervisor

Before you apply to a job, select your language preference from the options available at the top right of this page.

Explore your next opportunity at a Fortune Global 500 organization. Envision innovative possibilities, experience our rewarding culture, and work with talented teams that help you become better every day. We know what it takes to lead UPS into tomorrow—people with a unique combination of skill + passion. If you have the qualities and drive to lead yourself or teams, there are roles ready to cultivate your skills and take you to the next level.

Job Description:

The Business Process Controls Supervisor is a role in the Second Line of Defense that executes and supports business process control governance and readiness, management monitoring, risk assessment, issue management, remediation tracking, and training activities across assigned business process domains. This role maintains control documentation and policy-to-control alignment, performs readiness reviews and monitoring procedures, evaluates evidence and exceptions, maintains risk and issue records, supports SOX compliance calendar, certification readiness, and audit coordination activities, and prepares integrated reporting inputs and status updates for manager review. The role helps support an integrated view of control health by bringing together governance outputs, monitoring results, risk assessment results, and issue themes for assigned process areas.

Primary Responsibilities

Control Governance & Readiness

• Maintain business process policy-to-control mappings and validate that controls continue to align with policy intent, SOX standards, documented risk objectives, and program documentation expectations.
• Support periodic review and refresh of control descriptions, process narratives, risk and control matrices, flowcharts, and other governance artifacts used for SOX planning, scoping, readiness, and audit support.
• Perform readiness assessment procedures for new or changed business processes, systems, entities, and third-party service providers before they enter SOX scope.
• Identify control design or documentation gaps and coordinate with process owners to develop and track corrective actions.\

Control Monitoring

• Execute assigned monitoring procedures for business process controls, including review of control evidence, validation of monitoring attributes, and identification of exceptions or incomplete support.
• Assess whether control execution results indicate potential design, operation, documentation, evidence quality, or certification readiness issues requiring escalation.
• Support SOX control oversight by gathering control owner inputs, tracking readiness, monitoring milestone completion, and preparing status updates.
• Assist with audit coordination activities, including walkthrough scheduling, PBC routing, evidence tracking, status reporting, and resolution of follow-up requests.
• Evaluate SOC report and bridge letter inputs for assigned business process areas and identify potential control implications for manager review.

Risk Assessment, Issue Management & Remediation

• Facilitate process-level risk assessment meetings with first-line process owners and document risks, assertions, control linkages, risk responses, scoping considerations, and monitoring implications.
• Maintain risk assessment documentation, including SOX scoping inputs, risk ratings, process changes, and reassessment triggers that support enterprise risk reporting and certification readiness.
• Track remediation ownership, SOX milestone status, issue aging, remediation evidence, escalation items, and closure readiness for assigned business process areas.
• Perform preliminary review of root cause analysis and remediation plans to assess whether actions address the underlying issue and support sustainable control improvement.

Reporting, Training & Program Support

• Maintain SOX compliance calendar inputs, readiness milestones, monitoring status, exception logs, documentation status, open action items, and delayed deliverables for assigned business process areas.
• Prepare integrated governance, monitoring, risk, issue trend, remediation, and training reporting inputs, including scorecards and dashboards, for manager review and leadership reporting.
• Support Workiva maintenance for business process controls, including documentation updates, mapping completeness, workflow support, issue management records, dashboard inputs, and reporting inputs.
• Coordinate role-specific training administration, including participant identification, completion tracking, training gap escalation, and content updates based on emerging risks, control changes, or SOX program requirements.
• Support control optimization and standardization initiatives by identifying duplicative controls, inconsistent execution patterns, recurring exception and issue themes, and opportunities to improve SOX program execution.

Qualifications

• Bachelor’s degree in Accounting, Finance, Business Administration, Information Systems, Risk Management, or related field required.
• Certification or progress toward CPA, CIA, CISA, CFE, CRMA, or similar credential preferred.
• 3+ years of experience across SOX compliance, control governance, readiness activities, monitoring, control evidence review, risk assessment support, issue tracking, remediation documentation, audit support, training administration, or compliance reporting, with exposure to at least two of these areas preferred.
• Working knowledge of SOX 302/404, COSO, ICFR, financial statement assertions, risk and control matrices, process narratives, SOC report considerations, and Workiva or similar GRC platforms.
• Strong detail orientation, analytical judgment, documentation discipline, evidence evaluation, issue follow-through, and ability to manage competing priorities, escalate timely, and coordinate across process owners, control owners, finance teams, and auditors.

Job Grade- 202

Last day to apply internally- 11/17/26 @ 11:59pm EST

The position is based in Atlanta, GA and will require commuting to the office. Employer will not sponsor a visa for this position. Candidates must be currently in the same geographic location or willing to relocate independently.

Employee Type:

Permanent

UPS is committed to providing a workplace free of discrimination, harassment, and retaliation.

Other Criteria:

UPS is an equal opportunity employer. UPS does not discriminate on the basis of race/color/religion/sex/national origin/veteran/disability/age/sexual orientation/gender identity or any other characteristic protected by law.

Basic Qualifications:

Must be a U.S. Citizen or National of the U.S., an alien lawfully admitted for permanent residence, or an alien authorized to work in the U.S. for this employer.