Security Analyst

Qualifications

• 5+ years of experience in Security GRC, IT Audit, or a related field, with a strong focus onSOX complianceandIT General Controls (ITGCs) in aretail environment.
• Big 4 IT Audit experience or similar is required, with demonstrated expertise in evaluating and testing ITGCs and application controls supporting financial reporting.
• Deep understanding ofSOX Section 404requirements, including risk assessment, control design, and effectiveness testing.
• Experience working withineral and external auditors, including managing walkthroughs, evidence collection, and audit issue resolution.
• Strong knowledge ofITGC domainssuch as access controls, change management, IT operations, and system development lifecycle (SDLC).
• Familiarity withretail-specific systems(ex. Oracle EBS, Retail Management Systems, Order Management Systems, Warehouse Management Systems) and how they intersect with SOX compliance.
• Experience with cloud platforms(e.g., AWS, Azure),SaaS applications, and their implications for SOX controls.
• Proficiency in usingGRC toolslike
  
  Service
  
  Now, to streamline audit workflows and evidence management.
• Proven ability todrive remediation efforts, track control deficiencies, and support control owners in implementing sustainable solutions.
• Strong communication and stakeholder management skills, with the ability to influence cross functional teamsand align on compliance priorities.
• Demonstrated ability towork in a fast-paced, global retail environment, managing multiple priorities and time zones.
• Professional certifications such asCISA, CPA, or CIAare required.