Senior Director, Global SOX

Revolution Medicines is a global, commercial-state oncology company dedicated to discovering, developing and delivering innovative medicines for patients with RAS-addicted cancers. Leveraging its differentiated RAS(ON) tri-complex inhibitor platform, the company is advancing a broad, integrated portfolio of oral RAS(ON) inhibitors designed to directly target the active, cancer-driving state of RAS. Founded on rigorous scientific inquiry and a willingness to challenge long-held assumptions, Revolution Medicines is committed to changing the trajectory of disease for patients with RAS-addicted cancers worldwide. Our people are united by a shared way of working: follow the science, challenge assumptions, act with urgency and hold ourselves to a high standard of rigor—all in service of patients. The Opportunity RevMed is seeking an experienced, collaborative Senior Director, Global SOX to lead and scale the Company’s Sarbanes-Oxley compliance and internal controls program. This role has enterprise-wide governance responsibility for ICFR, ITGCs, ITACs, automated controls, key reports, and controls supporting evolving business processes, systems, commercial readiness, and global expansion. As a key Controllership leader, this role partners with functions, auditors, and process owners across the United States, Europe, Japan, Canada, and other markets. The leader will establish global SOX governance and practical regional execution, ensuring rigorous compliance while building risk-based, scalable controls that work effectively with business operations. This role reports to the VP, Finance, Controller, is based at RevMed’s Redwood City headquarters, and works closely with regional Finance, IT, and business teams. Responsibilities Global SOX Program Leadership Lead RevMed’s global SOX and ICFR program, including annual planning, scoping, risk assessments, walkthroughs, documentation, testing coordination, deficiency evaluation, remediation tracking, and reporting. Develop a scalable operating model with centralized governance, consistent standards, clear accountability, and right-sized controls that maintain compliance without unnecessary operational burden. Partner with Accounting, SEC Reporting, Technical Accounting, IT, Commercial, Supply Chain, Legal, HR, and regional teams to identify financial reporting risks and ensure controls are well designed, documented, owned, and effective. Maintain SOX documentation, including risk and control matrices, narratives, flowcharts, key reports, management review controls, and regional certifications or attestations. Provide quarterly and annual SOX updates to the Controller, senior management, and the Audit Committee, including status, key risks, deficiencies, and remediation progress. ITGC, Systems and Commercial Readiness Lead the global ITGC program for enterprise and regional systems supporting financial reporting, including ERP, procurement, payroll, equity, SEC reporting, lease accounting, commercial, inventory, consolidation, and other in-scope applications. Oversee ITGC domains such as user access, privileged access, change management, SDLC, computer operations, interfaces, data integrity, cybersecurity dependencies, and third-party providers. Partner with IT, Information Security, system owners, and process owners to assess control implications of new systems, integrations, cross-border data flows, and significant configuration changes. Embed controls by design in system implementations, regional deployments, localizations, and significant process changes, including access provisioning, change management, report validation, and post-implementation readiness. Support controls over commercialization and operational processes, including order-to-cash, gross-to-net, revenue recognition, inventory, third-party logistics, distributors / specialty pharmacies, patient support, government pricing / rebates, and country launches. Auditor Coordination, Remediation and Team Leadership Serve as the global SOX liaison with internal and external auditors, process owners, IT, Information Security, and other stakeholders to support efficient walkthroughs, testing, evidence submission, and issue resolution. Coordinate the global SOX calendar, PBC requests, control-owner responses, audit deliverables, and consolidated status reporting across regions and time zones. Identify audit bottlenecks, documentation gaps, control design issues, testing matters, and opportunities to simplify or automate controls while maintaining compliance and auditability. Lead evaluation and remediation of control observations and deficiencies, including root cause, severity, impact, remediation plans, and validation of operating effectiveness. Build and develop a high-performing global SOX and ITGC function, including employees, regional resources, consultants, and co-sourced providers. Required Skills, Experience and Education: Bachelor’s degree or higher in Accounting, Finance, Information Systems, Business Administration, or a related field. CPA, CIA, CISA, or equivalent certification strongly preferred; at least one relevant certification expected. 12+ years of progressive experience in SOX, internal controls, IT audit, public accounting, internal audit, controllership, or related fields. Significant experience leading a SOX 404 program for a publicly traded, multi-entity company with international operations. Deep knowledge of SOX 404, COSO, PCAOB auditing standards, SEC reporting requirements, ICFR, management review controls, and financial reporting risk assessment. Strong ITGC and ITAC experience across access, change management, SDLC, computer operations, interfaces, automated controls, key reports, SOC report review, CUECs, and third-party provider controls. Experience supporting global ERP or financial system implementations, upgrades, integrations, or transformations. Strong understanding of close, consolidat