Senior IT Compliance & Audit Analyst

About the role

Our client, a leading travel and hospitality provider, is seeking a Senior IT Compliance & Audit Analyst to join their team. This position is responsible for supporting enterprise access governance, IT SOX compliance, audit readiness, and supporting IT SOX relevant risk management activities across critical systems and infrastructure.

Responsibilities

• Conduct periodic user access reviews across applications, databases, cloud platforms, operating systems, and infrastructure environments
• Facilitate access certification campaigns using established standard operating procedures and automated Identity Governance and Administration (IGA) solutions
• Partner with management and system owners to design, review, and enhance role-based access controls (RBAC) and user provisioning processes to ensure compliance with policies
• Assess user access appropriateness, identify excessive privileges, and support remediation of access-related risks
• Support Segregation of Duties (SoD) reviews and identify potential conflicts across critical business systems
• Develop familiarity and expertise with Identity Governance solutions such as: Saviynt and Sonrai Security
• Perform testing and evaluation of IT General Controls (ITGCs), IT Application Controls (ITACs), and System Development Life Cycle (SDLC) controls
• Support all phases of SOX compliance activities, including planning, walkthroughs, test plan development, testing execution, documentation, and reporting
• Conduct Test of Design (TOD) and Test of Operating Effectiveness (TOE) assessments for IT SOX controls supporting key business processes
• Prepare clear, complete, and accurate audit workpapers in accordance with internal audit and compliance standards
• Review IT SOX controls across enterprise technologies including SAP, Workday, Windows, Unix/Linux, databases, cloud services, and other critical applications
• Collaborate with internal auditors, external auditors, and regulatory examiners as needed during audit and assessment activities
• Coordinate stakeholder support for audit requests, evidence collection, walkthroughs, and testing activities
• Document IT SOX audit findings, control deficiencies, observations, recommendations, and management responses
• Track remediation activities and drive resolution of IT SOX audit findings and control gaps through completion
• Facilitate status meetings and provide reporting on remediation progress to management and leadership
• Perform validation testing of remediation activities to confirm effectiveness and closure
• Collaborate with process owners, control owners, risk management teams, and technology leadership to strengthen enterprise control environments
• Participate in governance meetings to address access management risks, IT SOX audit findings, and compliance requirements
• Educate stakeholders on IT risk, SOX compliance responsibilities, access governance requirements, and control best practices
• Review and evaluate policies

Requirements

• Identity Lifecycle Management: Manage the lifecycle of user identities, including provisioning, de-provisioning, and role-based access control
• User Provisioning and De-provisioning: Assist in the processes for user account creation, modification, and termination, ensuring timely and secure access for employees and contractors
• Compliance and Reporting: Ensure adherence to identity management standards and provide regular reports on identity management practices and compliance to stakeholders
• Analytical Thinking: Dissect complex data to identify and mitigate security threats
• Problem-Solving: Quickly address and resolve security incidents and vulnerabilities
• Attention to Detail: Ensure accurate monitoring, analysis, and documentation of security events
• Communication: Clearly convey technical information to stakeholders and document incidents
• Teamwork and Collaboration: Work well in a team and coordinate efforts during security activities
• Audit and Compliance: Support the execution of regular audits of access controls and directory services to ensure compliance with internal policies and external regulations
• Incident Response and Troubleshooting: Assist in the response to and resolution of access-related security incidents and service requests

Qualifications

The ideal candidate will have experience in IT General Controls (ITGCs), user access reviews, SOX compliance, audit support, identity governance, and IT SOX risk assessments, with a strong understanding of access and change management controls across applications, databases, operating systems, cloud platforms, and infrastructure environments.

Skills

• Identity Lifecycle Management
• User Provisioning and De-provisioning
• Compliance and Reporting
• Analytical Thinking
• Problem-Solving
• Attention to Detail
• Communication
• Teamwork and Collaboration
• Audit and Compliance
• Incident Response and Troubleshooting

Benefits

• Medical, Dental, & Vision Insurance Plans
• Employee-Owned Profit Sharing (ESOP)
• 401K offered

Pay

The approximate pay range for this position is between $50 and $60/hr. Please note that the pay range provided is a good faith estimate. Final compensation may vary based on factors including but not limited to background, knowledge, skills, and location. We comply with local wage minimums.

Schedule

Location: Fort Worth, Texas