IT SOX Compliance Analyst

IT SOX Compliance Analyst (Contract)

Overview:
We are seeking an experienced IT SOX Compliance Analyst to support our annual SOX management attestation process. This individual will dedicate approximately 90% of their time to hands-on ITGC testing and execution, working closely with control owners, external auditors, and internal stakeholders. The role requires a deep understanding of IT environments, control frameworks, and audit methodologies, with the ability to identify control gaps and recommend effective remediations.

Scope of Work:
• Execute IT audit testing activities for SOX compliance, including the evaluation of technical controls across applications, databases, networks, and operating systems.
• Perform end-to-end ITGC testing, including Change Management, Logical Access, Program Development, and Computer Operations.
• Review system configurations and supporting documentation to confirm control design and operating effectiveness.
• Support walkthroughs with control owners and internal teams to confirm process understanding and validate control execution.
• Identify control deficiencies, document test results, and partner with stakeholders to recommend and track remediation activities.
• Contribute to the continuous improvement of the ITGC testing program by identifying opportunities to enhance efficiency and consistency.
• Assist in coordinating evidence collection and testing timelines to support external auditor requirements and deadlines.
• Collaborate cross-functionally with IT, Finance, and Compliance teams to ensure alignment on SOX program objectives and milestones.

Knowledge and Experience:
• Broad knowledge of IT infrastructure and computer system architecture across applications, databases, operating systems, and networks.
• Expertise in IT General Controls and SOX testing methodologies.
• Experience working with ERP systems, particularly SAP, including access and change management processes.
• Familiarity with IT control frameworks and standards such as COBIT, NIST, and ISO 27001.
• Demonstrated experience with ITGC risk assessment, testing execution, documentation review, and control remediation activities.
• Strong understanding of the relationship between IT controls, business processes, and audit procedures.
• Excellent written and verbal communication skills, with the ability to document findings clearly and engage effectively with both technical and non-technical stakeholders.

Preferred Qualifications:
• Bachelor's degree in Information Systems, Accounting, or a related field.
• CISA, CISSP, or CPA certification preferred.
• Prior experience supporting external SOX audits for public companies or regulated industries.
• Strong analytical, documentation, and project management skills with the ability to manage multiple testing assignments simultaneously.

Engagement Details:
• Duration: 3 months with potential for extension
• Focus: Hands-on ITGC and SOX compliance testing
• Location: Remote or hybrid depending on client requirements
• Reports to: SOX Program Manager / IT Audit Lead