SOX ITGC Process Control Analyst

Location: On site / Bellville, Cape Town, South Africa
job type: Permanent / Full-time
Sector and subsector: Accounting & Finance | Shared Service
Salary: Negotiable salary

The SOX ITGC Process Control Analyst acts as a first-line support function enabling IT and business control owners to meet SOX IT General Controls (ITGC) and process control requirements.

Working closely with IT, Finance, Internal Audit, and business stakeholders, you will facilitate process walkthroughs, document processes, prepare and review audit evidence, and ensure controls are executed and documented to a high standard. The role plays a key part in maintaining an effective internal control environment while supporting continuous process improvement across enterprise systems and infrastructure.

• Facilitate process walkthroughs and workshops with IT and business stakeholders.
• Document IT processes through narratives and process flow diagrams.
• Support the execution, testing, and monitoring of SOX IT General Controls (ITGCs).
• Prepare audit-ready evidence packs and perform first-level reviews before control owner approval.
• Review and maintain recurring management review control documentation.
• Perform Risk Control Self-Assessments (RCSAs) and identify control gaps.
• Support recurring management review controls including access recertifications and Segregation of Duties (SoD) reviews.
• Liaise with IT control performers and business control owners to ensure timely completion of control activities.
• Monitor progress of remediation activities through to completion.
• Support automated process controls across enterprise applications including SAP.
• Review evidence relating to Joiners, Movers and Leavers (JML), privileged access, change management, backup and recovery, and batch processing controls.
• Maintain comprehensive documentation for internal and external audit purposes.
• Identify opportunities to improve control effectiveness through automation and process optimisation.
• Stay current with SOX requirements, IT governance frameworks, regulatory changes, and cyber security best practices.

• Experience supporting SOX IT General Controls (ITGC) or IT governance, risk and compliance activities.
• Strong understanding of ITGC domains including:
• Joiners, Movers and Leavers (JML)
• Privileged Access Management (PAM)
• Segregation of Duties (SoD)
• Change Management
• IT Operations
• Backup and Recovery
• Batch Processing
• Experience facilitating workshops and process walkthroughs.
• Strong process documentation skills including process narratives and flow diagrams.
• Working knowledge of SAP (ECC or S/4
  
  HANA) or other enterprise ERP platforms.
• Understanding of IT infrastructure, operating systems, databases and enterprise applications.
• Knowledge of SOX and IT governance frameworks such as COBIT.
• Strong analytical and problem-solving skills.
• Excellent stakeholder engagement and communication skills.
• Ability to interpret control requirements and translate them into practical operational processes.
• Excellent organisational skills with strong attention to detail.
• Ability to work effectively across global, cross-functional teams.

• Bachelor's degree in Information Systems, Computer Science, Accounting, Information Technology or a related discipline.
• Experience with in IT Audit, SOX compliance, IT Risk or IT Process Improvement.
• Knowledge of manufacturing or global enterprise environments.
• Experience with automated controls and recurring management review controls.
• Familiarity with finance and supply chain processes.
• Lean or Six Sigma certification.
• Professional certifications such as:
• CISA
• CRISC
• ITIL
• Lean Six Sigma
• Other relevant governance or audit certifications.

• Strong analytical and critical thinking skills.
• Excellent attention to detail with a focus on audit readiness.
• High levels of integrity, professionalism, and accountability.
• Excellent written and verbal communication skills.
• Strong interpersonal and stakeholder management abilities.
• Collaborative team player who works effectively across business functions.
• Proactive approach to identifying risks and recommending improvements.
• Adaptable and…