Senior Associate - IT SOX Compliance

About the role

What you will do

• Drive and executes IT SOX 404 assessments, including risk assessment, walkthroughs, and testing of IT General Controls (viz. Access Management, Logical Security Settings, Change Management, and Computer Operations)
• Work in a collaborative team environment and contribute to the successful delivery of IT SOX Compliance and Internal Controls review engagements, including preparing high-quality, accurate, well-supported documentation, and reports.

. Evaluate the design and operating effectiveness of ITGC’s controls. Maintain up-to-date documentation, IT SOX Narratives, and process flowcharts.

• Drive and execute the IT General control testing around inscope Servers and Databases around Privilege User Access Review, Logical Security Settings, Back-up scheduling and Monitoring, Back-up Integrity, etc.

. Contribute and support the IT Automated Control testing, assess the completeness and accuracy of Annual User Access review at Enterprise level

• Perform thorough reviews to analyze the adequacy of IT controls, internal controls over financial reporting, compliance with corporate standards, policies, and regulatory requirements (e.g., SOX, SOC 1/2, ISO, NIST).
• Prioritize and assign tasks to ensure effective use of team resources and completion of work according to schedules and engagement objectives.
• Assist in the evaluation of system implementations/upgrades by performing the System Development Life Cycle (SDLC) reviews.
• Evaluate the IT control environments of the newly acquired entities to ensure adequate controls are in place to support the complete and accurate financial reporting.
• Present findings to management at the conclusion of engagements, discuss deficiencies, and recommend remediation actions and opportunities for improvement.
• Consult with IT clients to redesign/re-engineer processes; identify opportunities for optimizing operational efficiencies, strengthening internal controls, and reducing overall IT and Non-IT risk.
• Opine on the adequacy of remedial actions taken to correct deficiencies and assist with issue closure processes.
• Maintain adequate and current technical knowledge in areas such as IT general controls, business process controls, cybersecurity, and other areas as required.
• Communicate technical findings clearly to both technical and non-technical stakeholders.
• Respond to complex, escalated inquiries and ensure outstanding IT Audit & SOX issues are cleared.
• Collaborate with other functions of global Assurance & Advisory Services and support ad-hoc activities and engagements as needed.

What you will bring:

• Bachelor’s degree in information technology, Management Information Systems, Computer Science, Chartered Accountant, or related IT graduates
• Certified Information Systems Auditor (CISA) certification preferred.
• Minimum of 6 years’ combined experience in IT SOX Compliances, with strong exposure to SOX compliance framework, internal controls review, IT risk and governance.
• Knowledge of relevant IT domains including automated controls testing, system development lifecycle, SOC-1 report review, and identity and access management at Application and Operating System level (i.e., Servers and Databases).
• Demonstrated ability for independent thinking and multi-tasking under aggressive deadlines with a high degree of accuracy in a complex “matrix” environment.
• Proven ability to plan proactively, anticipate issues, and have excellent problem resolution records with little or no input or assistance.
• Proficiency in computer applications including MS Word, MS Excel, and MS Outlook.

We offer competitive compensation and comprehensive benefits and programs. We are an equal opportunity employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, pregnancy, age, marital status, disability, status as a protected veteran, or any legally protected status.