Senior Director, Global SOX

About this role

Revolution Medicines is a late-stage clinical oncology company developing novel targeted therapies for patients with RAS-addicted cancers. The company’s R&D pipeline comprises RAS(ON) inhibitors designed to suppress diverse oncogenic variants of RAS proteins. The company’s RAS(ON) inhibitors daraxonrasib (RMC-6236), a RAS(ON) multi-selective inhibitor; elironrasib (RMC-6291), a RAS(ON) G12C-selective inhibitor; zoldonrasib (RMC-9805), a RAS(ON) G12D-selective inhibitor; and RMC-5127, a RAS(ON) G12V-selective inhibitor, are currently in clinical development. As a new member of the Revolution Medicines team, you will join other outstanding professionals in a tireless commitment to patients with cancers harboring mutations in the RAS signaling pathway.

The Opportunity

RevMed is seeking an experienced, collaborative Senior Director, Global SOX to lead and scale the Company’s Sarbanes-Oxley compliance and internal controls program. This role has enterprise-wide governance responsibility for ICFR, ITGCs, ITACs, automated controls, key reports, and controls supporting evolving business processes, systems, commercial readiness, and global expansion.

As a key Controllership leader, this role partners with functions, auditors, and process owners across the United States, Europe, Japan, Canada, and other markets. The leader will establish global SOX governance and practical regional execution, ensuring rigorous compliance while building risk-based, scalable controls that work effectively with business operations.

This role reports to the VP, Finance, Controller, is based at RevMed’s Redwood City headquarters, and works closely with regional Finance, IT, and business teams.

Responsibilities

Global SOX Program Leadership

• Lead RevMed’s global SOX and ICFR program, including annual planning, scoping, risk assessments, walkthroughs, documentation, testing coordination, deficiency evaluation, remediation tracking, and reporting.

• Develop a scalable operating model with centralized governance, consistent standards, clear accountability, and right-sized controls that maintain compliance without unnecessary operational burden.

• Partner with Accounting, SEC Reporting, Technical Accounting, IT, Commercial, Supply Chain, Legal, HR, and regional teams to identify financial reporting risks and ensure controls are well designed, documented, owned, and effective.

• Maintain SOX documentation, including risk and control matrices, narratives, flowcharts, key reports, management review controls, and regional certifications or attestations.

• Provide quarterly and annual SOX updates to the Controller, senior management, and the Audit Committee, including status, key risks, deficiencies, and remediation progress.

ITGC, Systems and Commercial Readiness

• Lead the global ITGC program for enterprise and regional systems supporting financial reporting, including ERP, procurement, payroll, equity, SEC reporting, lease accounting, commercial, inventory, consolidation, and other in-scope applications.

• Oversee ITGC domains such as user access, privileged access, change management, SDLC, computer operations, interfaces, data integrity, cybersecurity dependencies, and third-party providers.

• Partner with IT, Information Security, system owners, and process owners to assess control implications of new systems, integrations, cross-border data flows, and significant configuration changes.

• Embed controls by design in system implementations, regional deployments, localizations, and significant process changes, including access provisioning, change management, report validation, and post-implementation readiness.

• Support controls over commercialization and operational processes, including order-to-cash, gross-to-net, revenue recognition, inventory, third-party logistics, distributors / specialty pharmacies, patient support, government pricing / rebates, and country launches.

Auditor Coordination, Remediation and Team Leadership

• Serve as the global SOX liaison with internal and external auditors, process owners, IT, Information Security, and other stakeholders to support efficient walkthroughs, testing, evidence submission, and issue resolution.

• Coordinate the global SOX calendar, PBC requests, control-owner responses, audit deliverables, and consolidated status reporting across regions and time zones.

• Identify audit bottlenecks, documentation gaps, control design issues, testing matters, and opportunities to simplify or automate controls while maintaining compliance and auditability.

• Lead evaluation and remediation of control observations and deficiencies, including root cause, severity, impact, remediation plans, and validation of o