Governance Risk and Compliance I Analyst II

Job description

Job Title

Senior IT SOX Compliance Analyst Division: Governance, Risk & Compliance Position Summary: We are seeking a Senior IT SOX Compliance Analyst with strong hands-on experience in SOX IT General Controls (ITGC) testing and execution to support and strengthen our internal control environment across a global enterprise. This role is highly execution-focused and requires an individual who can operate effectively in a fast-paced, audit-driven environment, working closely with IT control owners, Internal Audit, and cross-functional stakeholders to ensure controls are properly designed, executed, evidenced, and remediated.

The ideal candidate brings deep IT audit experience, strong attention to detail, and the ability to identify control gaps and drive practical improvements.

Key Responsibilities

Execute end-to-end SOX ITGC activities, including control walkthroughs, design validation, testing readiness, and evidence review across key domains (Access, Change Management, Operations, etc.). Perform hands-on control testing support, ensuring evidence is complete, accurate, and aligned with audit expectations. Review and validate control execution and documentation, identifying gaps, inconsistencies, or deficiencies in control design and operation.

Drive remediation efforts, working directly with control owners to close gaps, improve control effectiveness, and meet audit timelines. Support audit cycles (walkthroughs, interim, and year-end testing) by coordinating evidence collection, responding to auditor queries, and ensuring timely delivery of artifacts. Identify process inefficiencies and control weaknesses and proactively recommend practical improvements to enhance SOX ITGC maturity.

Assist in maintaining the SOX control repository (e.g., AuditBoard or similar), ensuring documentation is current, complete, and aligned to control owners. Support onboarding of new systems into SOX scope, including initial risk assessment, control mapping, and readiness validation. Collaborate with IT, Security, and business stakeholders to ensure clear understanding of control expectations and execution requirements.

Provide guidance to control owners on evidence standards, testing expectations, and common audit gaps to avoid repeat findings. Support development of SOX metrics and reporting, highlighting control health, deficiencies, and remediation status. Operate effectively under tight timelines, managing multiple priorities and escalations during peak audit periods.

Qualifications

Bachelor’s degree in accounting, MIS, Information Systems, or a related field. 5–8 years of hands-on experience in IT audit, SOX compliance, or IT risk management. Strong working knowledge of SOX IT General Controls (ITGCs) and familiarity with IT Application Controls (ITACs). Proven experience in control testing, walkthroughs, evidence validation, and audit support. Experience working with Internal Audit and external audit teams in a structured audit environment.

Familiarity with ERP and enterprise systems (e.g., Oracle, SAP, or similar). Experience with audit and GRC tools (e.g., AuditBoard or equivalent) preferred. Professional certifications such as CISA, CISM, CIA, or CPA are preferred.