Senior IT SOX Analyst

Responsibilities

IT SOX Compliance Program Support

- Support the execution of the global IT SOX compliance program across multiple systems, applications, and business units.

- Partner with control owners to ensure SOX controls are appropriately designed, documented, and operating effectively.

- Facilitate completion of quarterly and annual SOX compliance activities, including evidence readiness, control certifications, issue monitoring, and remediation tracking.

- Assist in maintaining process narratives, risk and control matrices (RCMs), control inventories, and related compliance documentation.

- Monitor compliance deadlines and follow up with stakeholders to ensure timely completion of SOX-related activities.

- Coordinate with Business Process SOX teams to ensure alignment between IT and business process controls.

IT Risk Assessment & SOX Scoping

- Support annual and quarterly IT risk assessments and SOX scoping exercises.

- Analyze system inventories, business processes, integrations, and financial reporting impacts to assist in identifying SOX-relevant systems and risks.

- Assist in evaluating the impact of organizational changes, acquisitions, and technology transformations on the SOX compliance program.

- Support documentation of emerging technology risks and changes to the IT control environment.

Control Owner Support & Advisory

- Serve as a trusted advisor to control owners regarding control execution, documentation standards, and remediation planning.

- Help educate IT and business stakeholders on SOX requirements, control expectations, and governance practices.

- Assist management in assessing control deficiencies and identifying practical remediation solutions.

- Support continuous communication between IT SOX, Business Process SOX, Finance, and technology teams.

Project & Continuous Improvement Initiatives

- Support compliance-related projects, including acquisitions, ERP implementations, system upgrades, and control transformation efforts.

- Participate in initiatives to improve compliance processes, stakeholder experience, reporting capabilities, and governance activities.

- Assist in developing reporting dashboards, risk metrics, and management reporting for senior leadership.

- Support implementation of automated monitoring and continuous improvement opportunities across the control environment.

Qualifications

Required

- 2 - 5 years of experience in IT SOX, IT Audit, SAP Security, IT Risk Management, Internal Controls, or a related discipline.

- Working knowledge of SOX 404 requirements and IT General Controls.

· Understanding of:
o User Access Management
o Segregation of Duties (SoD)
o Privileged Access Management
o Change Management
o IT Operations Controls
o Automated Controls

- Strong communication and stakeholder management skills.

- Strong organizational and project management abilities.

Preferred

- Experience working within SAP ECC, SAP S/4HANA and SAP GRC environments.

- Big 4 or large public company experience.

- Experience supporting SOX compliance programs within publicly traded companies.

- Experience participating in IT risk assessments or SOX scoping activities.

· Manufacturing industry experience.

- Experience supporting acquisition integrations or ERP transformation programs.

- Certifications such as CISA, CPA, CIA, CRISC, or progress toward certification.

Originally posted on Himalayas