IT Compliance Sr. Analyst

UCT is a diverse workplace committed to continuous innovation, challenging the status quo and exceeding customer expectations.

We are looking for a talented IT Compliance, Sr. Analyst to join us in Austin, TX or Phoenix, AZ.

The IT SOX Compliance Senior Analyst is responsible for supporting Sarbanes-Oxley (SOX) compliance efforts related to IT systems and processes within a complex, publicly traded company. This role ensures that the organization’s IT controls over financial reporting, including IT general controls (ITGCs) and IT-dependent controls, are properly designed, documented, and operating effectively in accordance with SOX Section 404 requirements. The position partners closely with IT process owners, internal and external auditors, and cross-functional stakeholders to support a strong IT compliance framework, monitor control execution, and assist with timely remediation of identified deficiencies.

• Lead SOX ITGC and application control testing, including design and operating effectiveness assessments.
• Conduct control evaluations, compliance reviews and risk assessments.
• Perform control design analysis and recommend improvements to IT processes.
• Coordinate and lead walkthroughs with internal and external auditors.
• Manage remediation plans, validate corrective actions, and ensure timely closure.
• Develop and maintain IT compliance policies, standards, and procedures.
• Provide guidance and mentoring to junior analysts.
• Partners with IT and PMO teams to embed compliance requirements into system design, cloud environments, and operational processes.
• Evaluate new technologies and system changes for compliance impact.
• Act as a liaison between IT, business units, and leadership on compliance matters.
• Researching and documenting security and compliance best practices for devices, applications, and emerging technologies.
• Evaluate compliance with the organization's security policies and making recommendations for areas of improvement.
• Researching and documenting compliance best practices for systems, applications, and emerging technologies.
• Experience navigating complex organizations, developing, and delivering vision through various communication strategies and presentations to senior-level executives and technical audiences.

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.

• Strong understanding of SOX ITGCs, application controls, and IT audit methodologies.
• Strong analytical skills to analyze security requirements and relate them to appropriate security controls.
• Ability to interpret regulatory requirements and translate them into actionable controls.
• Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one.
• Excellent communication and stakeholder management skills.
• Ability to work independently on complex tasks while contributing to team initiatives.
• High level of integrity and commitment to protecting organizational assets.
• Ability to analyze complex security issues and communicate findings clearly to technical and non-technical audiences.
• Hands-on experience with compliance management software (Audit Board, One Trust, Workiva) or similar enterprise security technologies.
• Hands-on experience with ERP business processes and roles and experience with access control software (SAP GRC, Pathlock, Open Pages) or similar enterprise technologies.
• Strong understanding of risk principles, authentication concepts, logging, SDLC, backup and restore, and change management.
• Deep understanding of segregation of duty principles and application.
• Ability to communicate complex technical issues to various audiences, including leadership.
• Demonstrates a strong understanding of control assessment techniques and processes.
• Strong analytic and problem-solving skills.
• Strong oral & written communications to include report development and delivery.