Senior Analyst, IT Internal Controls & SOX Compliance

About the role

Circle is looking for an experienced Senior Analyst, IT Internal Controls & SOX Compliance to join the Internal Controls and Compliance team. Reporting to the Senior Manager, IT Internal Controls, this individual will play a key role in supporting and enhancing Circle's IT SOX compliance program and overall internal controls environment. The Senior Analyst will evaluate the design and operating effectiveness of IT General Controls (ITGCs), automated controls, and IT-dependent manual controls across critical business systems and processes.

Enterprises, financial institutions, and developers use Circle to power trusted, internet-scale financial innovation. Circle is committed to visibility and stability in everything we do, expanding into some of the world's strongest jurisdictions. We have built a flexible work environment where new ideas are encouraged and everyone is a stakeholder.

Responsibilities

• Support the execution and continuous improvement of Circle's IT SOX compliance program, including annual planning, risk assessment, control documentation, testing coordination, and remediation tracking.
• Support and create SOX-ready documentation including narratives, flow charts, control descriptions, etc.
• Develop and lead control procedure documentation and assess controls changed and/or consolidated as a result of different system implementations.
• Lead conversations, understanding both IT and business processes and controls and the relationship between the two.
• Design and review system implementation, data conversion, or data migration control controls (SDLC).
• Conduct periodic reviews to ensure application controls and Segregation of Duties (SOD) are configured across the company's systems.
• Work in tandem with the internal audit group to design testing programs to ensure appropriate SOX assertions can be made.
• Support evaluation of third-party service providers for SOC reports.
• Review and design appropriate internal controls for completeness and accuracy of reports and Information Produced by the Entity (IPE).
• Project manage control design for new products, processes, and system implementation launches, ensuring appropriate internal controls are in place prior to launch.
• Manage the Audit Board internal controls repository.
• Review, assess, and evaluate reported control deficiencies, root causes, and planned corrective actions in conjunction with IT and business process owners.
• Work with internal and external auditors to coordinate IT General Controls and automated controls testing, and process walkthroughs to streamline impact on the business and align test results for efficiencies.
• Work closely with the IT, Security, Engineering, Data, and Compliance teams to ensure IT General Control documentation and monitoring programs are consistent with SOX requirements.
• Prepare materials and SOX compliance findings and assertions for Leadership and Audit Committee meetings.
• Contribute to the ongoing maturation of the Internal Controls program through optimization, standardization, and automation initiatives.
• Support special projects and ad hoc risk and compliance assessments as needed.

Requirements

• 4+ years of Big 4 experience in IT Audit, IT SOX Compliance, Internal Controls, Risk Advisory, or related fields.
• Bachelor's degree in Accounting, Information Systems, Computer Science, Business, or a related discipline.
• CPA, CISA, CIA, CISSP, or equivalent certification required.
• Strong knowledge of SOX 404 requirements, PCAOB standards, COSO framework, and IT General Controls (ITGCs).
• Proven experience designing, implementing, and managing ITGC and SOX compliance programs, ideally in a pre-IPO and/or newly public high-growth technology company environment.
• Experience testing and evaluating ITGCs, automated controls, IT-dependent manual controls, and key reports used in financial reporting processes.
• Strong understanding of cloud environments, SaaS applications, identity and access management, SDLC processes, and cybersecurity controls.
• Experience with ERP systems, financial applications, and GRC platforms.
• Ability to assess risks associated with AI-enabled processes and technologies, including governance, data quality, security, regulatory, and financial reporting considerations, and recommend appropriate controls and oversight mechanisms.
• Strong analytical, organizational, and problem-solving skills with exceptional attention to detail.
• Excellent verbal and written communication skills, including the ability to communicate effectively with both technical and non-technical stakeholders.
• Ability to evaluate business and technology processes, identify and articulate risks, and identify practical, scalable control solutions.
• Proven ability to manage multiple priorities, meet deadlines, and operate effectively in a fast-paced environment.
• High integrity and ability to handle confidential and sensitive information.
• Experience/familiarity with Slack, Apple MacOS, Google Workspace, and audit/compliance management tools.
• Experience leveraging artificial intelligence (AI) tools and technologies to improve business processes, including the development, implementation, or use of AI-enabled solutions, agents, automations, or productivity tools.

Preferred Qualifications

• Experience working in a high-growth technology, fintech, payments, crypto, or financial services environment.
• Experience related to SOC reporting oversight and issuance responsibilities.
• Strong understanding of SOC1, SOC2, and SOC3 reporting requirements and frameworks.

Pay

Base Pay Range: $112,500 - $147,500. Starting pay is determined by various factors, including but not limited to: relevant experience, skill set, qualifications, and other business and organizational needs. Please note that compensation ranges may differ for candidates in other locations.