The SOX Compliance Analyst is responsible for testing internal IT general controls (ITGC) to ensure compliance with the Sarbanes-Oxley Act (SOX). This role involves working under the guidance of senior compliance analysts to understand the ITGC environment and perform controls testing. The ideal candidate will have experience in IT compliance, with excellent analytical and communication skills.
Key Responsibilities
Perform IT General Controls (ITGC) testing and communicate results.
Assist with other internal and external cybersecurity and IT audits as required.
Conduct risk assessments to identify potential areas of risk and recommend improvements to mitigate those risks.
Perform detailed testing of key controls, document results, and identify control deficiencies. Work with process owners to develop and implement remediation plans.
Maintain comprehensive documentation of SOX compliance activities, including process narratives, flowcharts, risk matrices, and testing results.
Collaborate with cross-functional teams, including finance, IT, and operations, to ensure thoroughness and accuracy of controls testing.
Identify opportunities for process improvements and automation to enhance the efficiency and effectiveness of the SOX compliance program.
Qualifications:
Bachelor s degree in information technology, accounting, finance, business Administration, or a related field.
4+ years of experience in IT auditing, with a focus on SOX compliance and internal controls.
Good understanding of SOX requirements, internal control frameworks, and auditing standards.
Good understanding of other IT control frameworks such as NIST CSF, ISO 27001 is a plus.
Strong verbal and written communication skills, with the ability to effectively communicate with stakeholders.