Sr. Analyst – Internal Controls; IT

Job Description

On behalf of our public-sector client, Affinity is seeking a Sr. Analyst – Internal Controls (IT) to provide guidance, advisory support, and subject matter expertise to project teams during system implementations and major system changes. The role supports the design, assessment, testing, and validation of Information Technology General Controls (ITGCs), Information Technology Application Controls (ITACs), and Segregation of Duties (SoD) controls to help ensure compliance with financial reporting, regulatory, and governance requirements, including the CSOX Program.

While the primary focus of the role is supporting controls initiatives related to system implementations, additional responsibilities may include ad hoc support for broader CSOX Program activities. Working collaboratively with business process owners, project teams, application administrators, cybersecurity personnel, and internal and external auditors, this role helps promote a strong control environment throughout the system development lifecycle (SDLC) and supports the successful implementation of sustainable and compliant control frameworks.

• Provide guidance on the design and implementation of ITGCs, ITACs, and SoD controls during system implementations, upgrades, and transformation initiatives.
• Collaborate with project teams to identify key risks and recommend appropriate control activities to mitigate those risks.
• Support the integration of controls into business processes, workflows, and system configurations.
• Review proposed system designs and configurations to identify potential control gaps and compliance risks.
• Assess the design effectiveness of ITGCs, ITACs, automated controls, and SoD controls.
• Support control walkthroughs and documentation reviews to confirm controls are adequately designed and aligned to risks.
• Assist in validating control implementation prior to system go-live.
• Facilitate remediation efforts for identified control deficiencies and track progress through to resolution.
• Assist in the development and execution of SoD risk assessments.
• Support the review of role design, user access models, and security configurations for SoD compliance.
• Identify potential conflicting access and coordinate with stakeholders to evaluate mitigating controls.
• Support the implementation and monitoring of SoD governance processes.
• Participate in ITGC, ITAC, and SoD testing activities to evaluate control operating effectiveness.
• Assist with the development of test procedures and the collection of supporting evidence.
• Support management's compliance activities related to CSOX and other regulatory requirements.
• Maintain appropriate control documentation, risk assessments, and compliance records.
• Contribute to the ongoing evolution of the organization's IT controls framework and methodology.

• Bachelor's degree in Information Systems, Computer Science, Accounting, Finance, Business, or a related discipline.
• CISA (Certified Information Systems Auditor)
• CIA (Certified Internal Auditor)
• CPA (Chartered Professional Accountant)
• CISSP (Certified Information Systems Security Professional)
• CRISC (Certified in Risk and Information Systems Control)
• CISM (Certified Information Security Manager)
• 3 to 7 years of experience in IT controls, IT audit, SOX/CSOX compliance, risk management, cybersecurity governance, or a related field.
• Experience supporting ERP implementations or large-scale system transformation projects.
• Experience evaluating and testing ITGCs, ITACs, automated controls, and SoD controls.
• Familiarity with ERP environments such as Oracle, SAP, Workday, or other enterprise applications is preferred.
• Seeking a Sr. Analyst – Internal Controls (IT) to support Project Fusion and related system implementation activities.
• Experience with ITGCs, ITACs, SoD, SOX/CSOX compliance, IT audit, or IT risk management.
• Oracle Fusion experience is a significant asset; ERP implementation experience preferred.
• Strong ability to manage multiple priorities in a fast-paced environment.
• Self-starter who can work independently with minimal supervision.
• Strong stakeholder management and communication skills.
• Able to work effectively across…