Sr IT Sox Analyst

$100000 - $135000 per year | Mounds View, MN | Hybrid | Permanent

We are a publicly traded, multi-billion-dollar global services company with tens of thousands of team members and hundreds of locations across North America, Europe, and Asia-Pacific. Our business is built on recurring, non-discretionary services, and we have grown through a disciplined acquisition strategy. Every company we bring into the family needs to be brought up to speed on SOX, which makes our IT SOX Risk & Compliance team central to how we scale responsibly.

• Bonus upside: 10% annual bonus target that paid out at 140% last year, with a cap of 200%, plus profit sharing
• Big 4 to industry path:
  Our leader came up through Big 4 IT audit and actively coaches consultants into successful in-house careers
• Variety and ownership:
  Own a portfolio of in-scope systems, balanced across low, medium, and high complexity
• Growth environment:
  Ongoing acquisitions mean new systems, new control owners, and continuous learning
• Flexible hours:
  Start times range from 7am to 9am; the focus is on getting the work done
• Room to innovate:
  Long-term opportunity to identify tools and automation to improve the control environment
• Stability:
  Well-performing, consistently growing public company

We are seeking a Senior IT SOX Analyst to join our IT SOX Risk & Compliance team. You will serve as the risk and compliance coordinator between control owners and internal/external auditors, ensuring IT General Controls (ITGCs) and IT Application Controls (ITACs) are operating effectively. This role leans toward maintaining and strengthening an established control environment, with a strong emphasis on relationships, education, and accountability with control owners across recently acquired businesses.

• Own a portfolio of 5-7 SOX in-scope IT systems, partnering with control owners to operate, maintain, and enhance controls
• Ensure control owners follow established processes (change tickets, access reviews, approvals) and help them understand the "why"
• Prepare controls as needed and map and document processes, identifying improvement opportunities
• Document SOPs and controls using approved templates, aligned with SOX standards
• Respond to audit findings with mitigation documentation and remediation plans; drive issues to closure
• Coordinate with external vendors on timely delivery of SOC reports; evaluate SOC reports with control owners, identify exceptions, and confirm complementary user entity controls are in place
• Act as liaison between internal/external auditors and IT, ensuring timely and complete audit documentation during the annual audit cycle
• Support controls for newly acquired businesses as the organization grows
• Over time, identify opportunities for automation and continuous improvement

• 3-5 years of IT audit or IT SOX experience; high-performing seniors with 2+ years considered
• Background in public accounting (Big 4 or regional firm), consulting, or corporate internal audit with IT audit focus
• Strong working knowledge of ITGCs, ITACs, user access reviews, change management, and SOC report evaluation
• Ability to explain technical audit concepts clearly and concisely to non-audit stakeholders
• Highly organized, detail-oriented, and comfortable owning documentation as an individual contributor
• General ERP knowledge; experience with construction accounting, CRM-based ERP, or HCM platforms a plus
• Bachelor's degree in Information Systems, IT, Business, or related field preferred
• CISA, CPA, CISM, or similar preferred, not required

• 10% annual bonus target (cap…