Job Description

Contract IT SOX Analyst

Remote or Hybrid Schedule

The IT SOX analyst is responsible for overseeing the testing effectiveness of IT general controls (ITGCs) to ensure compliance with the Sarbanes-Oxley Act (SOX). This role involves supporting the annual SOX examination, coordinating with external auditors, and ensuring that IT processes and controls are effectively designed and operating as intended.

Candidates should be out of a bank or financial firm and the Manager would like someone with CISA.

Job Responsibilities:

• Coordinate successful SOX testing execution with internal and external auditors
• Review and assess IT general control design for effectiveness and scalability, then drive the remediation of identified issues
• Review auditor requests and assign to correct control owners.
• Review and validate the content and quality of control owner’s evidence submissions before providing to audit.
• Analyze each audit request and work with control owners so they can better understand the precise technical requirements of the evidence request.
• Work with internal audit in the execution of SOX testing procedures. Support the identification of control weaknesses, exceptions, and deficiencies in managed change, managed operations, and managed access control areas.
• Ensure alignment between relevant technology control owners, technology application teams, and business teams to optimize the efficiency and effectiveness of the SOX examination
• Develop a comprehensive risk assessment which summarizes management’s perspective of the effectiveness of IT SOX controls in ensuring the integrity of the financial statements.
• Maintain and enhance SOX controls documentation so they reflect the current environment and improve the efficiency of the SOX audit.

Required Qualifications

• Bachelor’s degree in Accounting, Business Administration, Computer Science, Engineering, Information Systems, or related discipline.
• Must have recent hands-on SOX experience
• 5+ years of relevant work experience in a combination of public accounting firms or Big 4 with a focus on SOX compliance and/or corporate SOX experience, with a minimum of 3 years of experience in technology or support of technology.
• Deep understanding of the Sarbanes-Oxley Act, the 2013 COSO framework, NIST, COBIT, SOC, DCAM, and SEC guidance for management's assessment of internal controls over financial reporting.
• Deep understanding of current accounting and auditing principles.
• Proven ability to build relationships and influence and motivate teams to ensure that the work activities are established, understood, supported, and completed in a timely manner.

Preferred Qualifications

• Professional certification such as CISA, CIA, CFE, CISSP.