Senior SOX Compliance Analyst - IT

About the role

The Senior SOX Compliance Analyst - IT supports the Manager, IT Compliance in executing the Company’s SOX IT compliance program and broader IT risk management activities. The incumbent assists in evaluating IT controls, performing testing, maintaining documentation, and coordinating with IT control owners and audit teams.

Responsibilities

• Supports the execution of the IT SOX compliance program, including walkthroughs, control testing, evidence collection, and documentation updates.
• Assists in evaluating the design and operating effectiveness of IT general controls (ITGCs) and application controls across in-scope systems.
• Maintains process documentation, including control matrices, flowcharts, narratives, and testing workpapers.
• Collaborates with IT control owners to obtain evidence, clarify control execution, and support remediation activities.
• Supports the Manager in preparing reports, dashboards, and status updates for IT leadership and audit stakeholders.
• Participates in IT risk assessments by gathering data, identifying potential gaps, and assisting in documenting results.
• Collaborates with internal and external auditors by facilitating requests, supporting walkthroughs, and ensuring timely delivery of audit materials.
• Affords assistance in developing and delivering training materials for IT control owners to reinforce SOX expectations and compliance responsibilities.
• Performs other job-related duties as assigned or apparent.

Qualifications

• Foundational understanding of IT general controls, SOX requirements, and the COSO framework.
• Familiarity with IT environments, including applications, databases, operating systems, and access/security concepts.
• Strong analytical and problem-solving skills with the ability to evaluate data, identify issues, and propose solutions.
• Effective communication and interpersonal skills, with the ability to collaborate across IT, Accounting, and business teams.
• Strong organizational skills and attention to detail, with the ability to manage multiple tasks and deadlines.
• Demonstrated understanding of internal controls and the relationship between IT controls and financial reporting processes.
• Progress toward professional certifications such as CISA, CIA, CPA, or Security+ is preferred.
• Knowledge of internal controls over financial reporting and familiarity with business process controls is a plus.

Minimum Requirements

• 2 - 4 years of experience in IT audit, IT compliance, or related IT risk functions in public accounting (Big 4 or national firm).
• 4 - 7 years of experience in IT audit, IT compliance, or related IT risk functions in a public company environment.
• Hands-on experience supporting SOX IT control testing or participating in IT audits.
• Experience with SOX testing, documentation, or remediation activities (IT or business process).