Job Description

IT Audit and Compliance Analyst

Company: BGIS

Location: Sydney CBD 2000

Employment Type: Full Time (12 Month Contract)

About the Role

We are seeking a motivated IT Audit & Compliance Analyst to strengthen our IT General Controls (ITGC) and Sarbanes-Oxley (SOX) compliance program across our APAC operations. This offers an excellent opportunity to develop expertise in cybersecurity, information security frameworks, and risk management while working alongside experienced security professionals in a dynamic environment serving multiple sectors.

In this role, you will play a critical part in monitoring control effectiveness, supporting internal and external audit activities, and driving continuous improvement in our compliance posture.

Key Responsibilities

Controls Testing, Documentation & Compliance Management

• Support the IT Risk & Controls Manager in monitoring compliance with internal IT policies and external regulatory requirements, including SOX and ISO 27001
• Assist in the execution and documentation of IT control testing procedures to evaluate control design & effectiveness and to identify potential gaps
• Perform control testing activities in accordance with established methodologies and frameworks such as SOX ITGC, ISO 27001, etc
• Maintain accurate and well-organised documentation of testing activities, results, and supporting evidence to ensure audit readiness
• Assist in preparing audit observations, control deficiencies, and risk findings for review by the IT Risk & Controls Manager before communication to stakeholders
• Support the development of corrective and preventive action plans, ensuring recommendations are practical and aligned with business objectives
• Track remediation actions arising from internal and external audits, following up with control owners to support timely closure and evidence collection
• Support the IT Risk & Controls Manager on internal and external audit engagements by collating and providing audit evidence to auditors in a timely manner
• Provide support to control owners as required by reinforcing control execution requirements, documentation standards, and testing expectations
• Identify opportunities to improve efficiency in audit processes and control testing activities, suggesting improvement ideas to the IT Risk & Controls Manager
• Contribute to the maintenance of the IT risk register and compliance reporting metrics by providing data and supporting information
• Stay informed on relevant regulatory requirements, industry standards, and audit practices, applying guidance as directed

What We're Looking For

Essential Experience

• 2+ years of experience in IT audit, IT controls testing, or information security compliance roles
• 2+ years of hands-on SOX compliance experience, including Sarbanes-Oxley Section 404 ITGC testing
• Demonstrated experience with IT control frameworks such as SOX,COBIT, COSO, or ITIL
• Proven ability to conduct control walkthroughs, design test procedures, and document testing evidence

Professional Skills

• High proficiency in Microsoft Excel, Word, and PowerPoint
• Excellent written and verbal communication skills with the ability to present complex technical concepts to diverse audiences

Qualifications

Required

• Bachelor’s degree in information systems, Computer Science, Accounting, Information Security, or related field

Certifications (Preferred or In Progress)

• Certified Information Systems Auditor (CISA)
• Certified Internal Auditor (CIA)
• ISO 27001 Lead Auditor (LA) or Lead Implementer (LI)
• CISSP, CISM, CRISC, or other relevant cybersecurity certifications

Why Join BGIS?
✔ AFR Best Places to Work 2024 & 2025
✔ Award-winning DE&I culture (Work180 Accredited)
✔ Leadership development & internal career mobility
✔ Health & wellbeing programs including EAP & flu vaccinations
✔ 2 paid volunteer days each year + donation matching
✔ Recognition programs & innovation initiatives
✔ Global organisation with 12,000+ people and 50,000+ sites
✔ Sustainability-focused workplace

BGIS is an equal opportunity employer. We strongly encourage applications from women, Aboriginal and Torres Strait Islander peoples, LGBTQ+ individuals, and people from culturally diverse backgrounds.

Apply now to take the next step in your career with BGIS.