IT SOX Analyst

We are now looking for an IT SOx Analyst, Risk & Control (R&C) in our CoE to support R&C with SOx
testing of IT Controls. You will be directly working on testing internal controls to support SOX302
attestation.
The R&C IT SOx Analyst is also a subject matter expert, responsible for advising the Risk team on
controls design, deficiencies evaluation and improvements across multiple processes from SOx testing
standpoint.
A successful risk professional requires a dynamic personality and ability to adapt in a rapidly changing
environment.
B. responsible: key areas of responsibility will include, but are not limited to:

• Execute and lead testing end to end for the assigned areas:
• Design and execute the day-to-day testing activities of IT controls, with a focus on

regulatory/compliance (SOx) related risks

• Collect, analyze, and interpret information to assess and conclude on each assigned

testing area with clear concise documentation

• Identify gaps in design and execution, and communicate issues and recommendations to

R&C team and control owners

• Develop and maintain comprehensive documentation including process walkthrough

documentation, control testing documentation and any others required

• Understanding of and experience with risk management relevant fields and frameworks, including

SOx, COSO, and COBIT

• Strong working knowledge of SOx
• Ability to multitask and successfully manage multiple priorities and projects
• Strong work ethic, enthusiastic, self-starting, adaptable and enjoys change in a super engaged

team

• Excellent communication skills to interact with audit teams, management and other stakeholders

effectively

• Ability to work effectively in a virtual environment
• Fully comfortable working in English, both written and spoken
• Professional certification, such as CISA/CRISC/CIA (or similar), would be an advantage
• Relevant bachelor’s degree required
• Experience working with a Big4 is preferred