Senior IT Compliance Analyst

Job Summary

The Senior IS Compliance Analyst will be responsible for SOX readiness analysis for CooperVision applications being brought into scope for SOX. This work will involve designing IT SOX controls in collaboration with application owners, documenting the design, and training the outsource team responsible for SOX IT control activities for the handover of the performance of control execution and documentation going forward.

Responsibilities

• Designs, implements and monitors Sarbanes Oxley (SOX) IT application and general computer controls for all new applications onboarded to CooperVision’s SOX program globally in collaboration with business and IT teams
• Obtains and reviews technical architectural diagrams for applications in scope and keeps list of in scope servers up to date
• Trains outsourced team responsible for IT SOX control performance on new controls to hand over on-going control execution
• Leads SOX audit IPE and ITAC walkthroughs and evidence gathering for SOX audit working closely with internal and external auditors, business units and IT stakeholders
• Communicates issues with control performance to Management in a timely manner and leads any necessary remediation or mitigation activities
• Performs data quality assurance activities over the completeness and accuracy of data queries and other key reports or IPEs used for control execution
• Works closely with internal and external auditors during the annual SOX audit
• Works closely with global departments involved in IT controls related to SOX such as Finance, IT Security, Networking, Legal, etc.
• Looks for opportunities to streamline control processes utilizing technology
• Documents audit support procedures and process flows when needed
• Provides training to employees on IT control processes and documentation as needed
• Travel Requirements: International travel up to 10%, off-hour meetings

Qualifications

• Understanding of the Sarbanes-Oxley Act of 2002 and IT general controls (ITGCs).
• This includes expertise in assessing and implementing access management, change management, data center controls and IT operations controls.
• Demonstrated expertise in IT application controls (ITACs), including the ability to document and test these controls.
• Strong experience evaluating and testing Information Produced by Entity (IPEs), including completeness and accuracy of IPE outputs.
• Experience with SOX IT audit processes and documentation.
• Familiarity with IT internal control frameworks.
• Advance proficiency in Microsoft Excel, including complex formulas and data analysis.
• Strong understanding of technology and ability to suggest technological solutions.
• Ability to effectively prioritize and execute tasks in a fast-paced environment.
• Adapts readily to changes in workload, staffing and scheduling.
• Detailed-oriented, independent and thorough in examination and analysis.
• Excellent analytical and problem-solving skills.
• Excellent written, oral, and interpersonal communication skills.
• Highly self-motivated and self-directed.
• Extensive experience working in a team-oriented environment in a collaborative manner.

Education

• Bachelor’s degree in business, accounting, finance, computer science, information systems or a related discipline required, or equivalent combination of education and experience.
• CISA, CIA, CPA or equivalent certification preferred.