IT Controls Analyst

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an IT Controls Analyst based in the United States.

As an IT Controls Analyst, you will play a key role in maintaining the security, integrity, and compliance of enterprise IT systems through effective user access management. You will oversee access provisioning, permissions, and account lifecycle processes, ensuring that employees have the appropriate system access based on their roles and responsibilities. Working closely with IT teams, compliance specialists, and department leaders, you will help maintain robust access control procedures and support internal governance requirements.

You will also contribute to quarterly Sarbanes-Oxley (SOX) access reviews, documentation improvements, and the implementation of controls for newly introduced systems. This position combines technical support, operational coordination, and compliance-focused responsibilities within a growing, fast-paced organization. It offers an opportunity to strengthen information security practices while developing your expertise in IT governance and access management.

• Manage user account provisioning, modification, and deactivation across designated IT systems and services, ensuring all access changes are supported by appropriate approvals.
• Assign and maintain user permissions in accordance with Role-Based Access Control (RBAC) standards and established access management procedures.
• Ensure timely removal of system access when employees leave the organization or change roles, verifying that permissions have been fully revoked using automated tools whenever available.
• Participate in quarterly Sarbanes-Oxley (SOX) user access reviews, including extracting access data, organizing and reconciling spreadsheets, and coordinating review activities with representatives across multiple departments.
• Apply the Principle of Least Privilege by ensuring users receive only the access necessary to perform their responsibilities.
• Identify and elevate inappropriate access assignments, excessive permissions, and potential segregation of duties conflicts.
• Create, update, and maintain access control documentation, including standard operating procedures (SOPs), role definitions, and internal policies.
• Develop access management procedures and supporting documentation for newly introduced applications, systems, and technology tools.
• Follow established change management processes when implementing access-related modifications or supporting new system deployments.
• Investigate, troubleshoot, and resolve user access issues and related service tickets within established procedures and service expectations.
• Provide helpdesk support for designated systems and applications, where trained and authorized.
• Collaborate with IT Compliance, technical teams, department leaders, and non-technical employees to coordinate access requests and ensure consistent application of security controls.
• Maintain accurate records of access changes, approvals, reviews, and related activities to support audit readiness and regulatory compliance.
• Perform additional responsibilities as required to support IT operations and internal control objectives.

• High school diploma or equivalent.
• At least 1 year of IT services, technical support, or a related professional experience.
• Strong technical aptitude and willingness to develop expertise in IT access management, security controls, and enterprise systems.
• Familiarity with identity and access management concepts, particularly Role-Based Access Control (RBAC).
• Understanding of user account provisioning, permission management, access reviews, and basic information security principles.
• Experience working with ticketing and service management platforms such as Zendesk, Click Up, or equivalent tools.
• Proficiency in Microsoft 365 applications, particularly Excel, with the ability to organize, analyze, reconcile, and maintain access-related data.
• Strong attention to detail and documentation skills, particularly when managing permissions, reviewing access records, and maintaining compliance documentation.
• Excellent organizational and time management abilities, with the capacity to manage multiple requests and meet established deadlines.
• Strong analytical and problem solving skills, with the ability to investigate access issues and identify potential control weaknesses.
• Effective written and verbal communication skills, including the…