Internal Audit, Controls, Compliance, and Risk

Specialist, Internal Audit, Controls, Compliance, & Risk

Pearson is seeking a highly organized and detail-oriented Internal Audit, Controls, Compliance, & Risk Specialist to join the Cybersecurity team. Primary duties include supporting access governance, audit readiness, compliance, risk mitigation, and control activities across multiple business applications and technology platforms. This role is execution-focused and plays a critical part in administering role-based access, supporting provisioning and deprovisioning controls, preparing audit evidence, executing SQL-based data analysis, MFA resets and supporting compliance initiatives related to SOX, FedRAMP, and internal control requirements.

The role will also support helping to identification, escalation, and tracking of cybersecurity risks and control deficiencies.

You will work closely with IT, Business Stakeholders, Application Owners, Security Teams, Auditors, and end users across multiple geographies to ensure access is appropriate, compliant, documented, and aligned with established controls while maintaining audit readiness and timely completion of access-related requests.

• Ensure access provisioning and deprovisioning activities are completed accurately and within established timelines to support audit readiness, mitigate risk, and maintain compliance with security and control standards.
• Collect, validate, and prepare audit evidence to support compliance and control testing activities
• Execute SQL queries and scripts to retrieve, analyze, and validate data for audit and compliance requirements
• Utilize Excel to perform data analysis, reconciliations, reporting, and audit support activities
• Assist with documenting processes, controls, evidence inventories, and audit work papers
• Monitor compliance with internal policies, standards, and regulatory requirements
  
  Maintain audit readiness by ensuring evidence is complete, accurate, and readily available

• Administer user access for enterprise applications, including provisioning, deprovisioning, role changes, account maintenance, and password resets for systems
• Review access requests to ensure they are appropriate, approved, documented, and aligned with role-based access controls, least-privilege principles, and internal control requirements
• Support access-related incidents and account issues while ensuring activities are performed in accordance with security policies and compliance standards
• Manage access administration requests through Service Now to maintain traceability, approval documentation, and audit support
• Track and prioritize access governance activities, audit deliverables, account maintenance requests, and compliance tasks simultaneously
• Escalate access exceptions, system limitations, or control concerns to application owners, security teams, or other appropriate stakeholders
• Maintain accurate documentation of access requests, approvals, account changes, credential support, and remediation actions

• Work across multiple in-house and enterprise applications to support access governance, audit, and compliance activities
• Support Azure-based environments through reporting, access reviews, compliance validation, and user administration activities
• Assist in identification, tracking, escalation and remediation of cyber risks and control deficiencies
• Utilize Service Now to manage access-related requests, track work items, document approvals, and support workflow management
• Assist with researching access discrepancies, entitlement issues, and control exceptions across various systems and platforms
• Support user access reviews, role validations, temporary access analysis, and control-related activities as needed

• Bachelor's degree in Information Systems, Information Technology, Computer Science, Business, Accounting, Cybersecurity, or a related field
• 2+ years of experience supporting access management, audit, compliance, governance, risk, internal controls, cyber or technology operations
• Experience using Microsoft Excel for data analysis, reporting, and reconciliation activities
• Experience executing and interpreting SQL queries and scripts
• Experience working with Service Now or similar ticketing and workflow management platforms to manage access requests, approvals, and documentation
• Familiarity with Microsoft Azure environments and cloud technologies
• Strong understanding of access management…