IT Lead Analyst, Internal Audit

IT Lead Analyst, Internal Audit

Lets be unstoppable together!

At Circana, we are fueled by our passion for continuous learning and growth, we seek and share feedback freely, and we celebrate victories both big and small in an environment that is flexible and accommodating to our work and personal lives. We have a global commitment to diversity, equity, and inclusion as we believe in the undeniable strength that diversity brings to our business, employees, clients, and communities. With us, you can always bring your full self to work. Join our inclusive, committed team to be a challenger, own outcomes, and stay curious together. Circana is proud to be Certified by Great Place To Work. This prestigious award is based entirely on what current employees say about their experience working at Circana.

Learn more at www.circana.com.

What will you be doing?

The global Internal Audit team plays a key role in the initial implementation of Circana’s ICFR program. The Internal Audit IT Lead Analyst will join a lean team, reporting directly to the Internal Audit Director to provide guidance on IT compliance matters and work closely with the external auditors, IT, finance and business unit leaders to maintain a robust IT compliance framework. This role will assess IT risks and lead the design, implementation, and continuous improvement of IT controls over systems and processes to safeguard the integrity of the company’s internal controls across the organization's global operations.

Job Responsibilities

• Conduct IT ICFR risk assessments of in-scope applications, IT controls rationalization and optimization
• Serve as a technical resource on all IT ICFR matters, providing reliable and insightful recommendations for implementing internal controls within IT processes. Develop and monitor key IT ICFR metrics and timelines.
• Ensure appropriateness of IT ICFR documentation, including process flows, risk control matrices and test plans, and evaluate / develop / refine controls as systems are upgraded or processes change.
• Manage and conduct IT testing for design & operating effectiveness and remediation test work including IT general controls (ITGCs), IT application controls (ITACs), information produced by entity (IPE) key reports, user access reviews and system and organization controls (SOC) reviews for consistency and quality across all testing activities.
• Build and maintain a comprehensive understanding of business applications and maintain active relationships across the company to facilitate audit execution
• Develop and execute Segregation of Duties assessment as well as assist the Director of Internal Audit in identifying compensating controls for identified SOD conflicts
• Monitor the broader organization to ensure the control environment adapts as the company evolves. Provide consultation support on IT control readiness for emerging or newly in-scope areas with a focus on IT related processes and controls, such as software development life cycle (SDLC) controls.
• Conduct internal ISO27001 audits, ensuring compliance with information security policies, identifying risks, and recommending improvements to maintain certification standards.
• Oversee the monitoring and follow-up of remediation plans from NIST maturity assessments, ensuring timely progress, addressing deficiencies, and driving continuous security improvement.
• Facilitate the use of data analytic techniques to drive opportunities for control improvements and control testing efficiencies. Leverage emerging technologies such as AI and machine learning to enhance compliance processes where applicable.
• Communicate effectively with IT teams, business unit leaders, finance teams and external auditors and ensure timely remediation of any identified IT control deficiencies or weaknesses
• Provide guidance and training on IT ICFR compliance as needed.

Requirements

• Bachelor’s degree in information technology, Computer Science, or related field. CISA or CISSP certification is highly preferred.
• 10+ years of experience in information security and IT audit, compliance or risk management roles, with a strong knowledge of SOX requirements and control frameworks, such as COSO, ISO27001, NIST CSF and COBIT, with a Big 4 accounting firm, and Fortune 500 public company.
• Strong understanding of current IT SOX testing methodologies, risk assessment practices, latest PCAOB requirements, and their practical application in complex IT environments.
• Advanced understanding of ITGCs and ITACs, including the ability to identify and evaluate key reports and interfaces critical to financial reporting and system integrity.
• Experience with GRC and Data-Analytics related software is preferred.
• Strong work ethic and collaborative working style, coupled with a timely action-oriented mindset.

Circana Behaviors

As well as the technical skills, experience and attributes that are required for the role, our shared behaviors sit at the core of our organization. Therefore, we always look for people who can continuously champion these behaviors throughout the business within their day-to-day role:

• Stay Curious: Being hungry to learn and grow, always asking the big questions.
• Seek Clarity: Embracing complexity to create clarity and inspire action.
• Own the Outcome: Being accountable for decisions and taking ownership of our choices.
• Center on the Client: Relentlessly adding value for our customers.
• Be a Challenger: Never complacent, always striving for continuous improvement.
• Champion Inclusivity: Fostering trust in relationships engaging with empathy, respect, and integrity.
• Commit to each other: Contributing to making Circana a great place to work for everyone.

Location

This position can be located in the following area(s): India