IT SOX Controls & Compliance Analyst

The IT SOX Controls & Compliance Analyst will be responsible for executing and enhancing IT SOX compliance activities, particularly in the context of system implementations and business process changes. This role requires deep expertise in SOX controls, strong analytical skills, and the ability to work closely with auditors and cross-functional project teams.

• Evaluate the current IT SOX control environment and identify gaps based on system implementations and process changes.
• Design, implement, and update IT SOX controls to ensure compliance.
• Support deficiency identification, documentation, and remediation efforts.
• Review project documentation to ensure alignment with SOX compliance requirements.
• Partner with project teams to enhance and update control documentation.
• Assess new business processes to determine in-scope SOX systems and required controls.
• Collaborate with internal stakeholders and external auditors with minimal supervision.
• Provide guidance on IT controls and compliance best practices.

• Bachelor’s degree in Accounting, Information Systems, Finance, or related field.
• 5–8+ years of experience in IT SOX compliance or IT audit
• Big 4 consulting/audit experience (must-have)
• Strong knowledge of SOX ITGC (IT General Controls)
  ** and compliance frameworks.
• Experience supporting system implementations and process changes.
• Proven experience in control design, testing, and remediation
• Strong communication skills with the ability to interact with auditors and stakeholders.

• Certifications such as
  ** CPA, CISA, or CIA**.
• Experience in large enterprise or global environments.
• Exposure to ERP systems (SAP, Oracle, Workday).

• IT SOX compliance and control assessment
• Risk identification and remediation
• Audit coordination and documentation review
• Process evaluation and control design
• Stakeholder communication and collaboration

• Cross-functional collaboration with IT, Finance, and Audit teams
• Fast-paced environment supporting system changes and compliance deadlines
• High-visibility role interacting with auditors and leadership.
• Requires independent work with minimal supervision.
• Strong focus on compliance, risk mitigation, and process improvement.