About the Role (Job Summary)

We are seeking a SOX & IT Compliance Analyst to support and enhance our Governance, Risk, and Compliance (GRC) program. In this role, you will help ensure compliance with Sarbanes-Oxley (SOX) requirements, support IT controls testing, manage access governance processes, and contribute to cybersecurity compliance initiatives.

You will partner with internal stakeholders, auditors, security teams, and business leaders to evaluate controls, identify risks, document evidence, and drive continuous improvement across compliance processes. This is an excellent opportunity for an experienced compliance professional who enjoys solving complex problems, improving operational effectiveness, and helping strengthen enterprise risk management practices.

What You'll Do (Responsibilities)

• Execute and support SOX IT General Controls (ITGC) testing activities, including evidence collection, review, and documentation.
• Administer and support SAP GRC Access Control and Process Control solutions.
• Support user access reviews, segregation of duties (SoD) monitoring, and identity governance processes using SailPoint.
• Partner with business and technology teams to ensure compliance with internal controls and regulatory requirements.
• Prepare compliance reports, audit documentation, control testing results, and remediation status updates.
• Track, monitor, and report cybersecurity compliance activities, vulnerabilities, and remediation efforts.
• Conduct risk assessments and compliance reviews to identify gaps, control weaknesses, and improvement opportunities.
• Support internal and external audits by coordinating evidence requests and documenting control effectiveness.
• Assist with remediation planning and tracking for identified control deficiencies.
• Maintain process documentation, policies, standards, and compliance procedures.
• Develop and monitor key compliance metrics and performance indicators.
• Contribute to continuous improvement initiatives that enhance governance, risk management, and compliance processes.

Basic Requirements

• Bachelor's degree or equivalent combination of education and experience.
• Typically requires 4+ years of relevant professional experience in IT compliance, SOX, audit, governance, risk management, cybersecurity compliance, or related functions.
• Experience supporting SOX controls testing, audit activities, and evidence documentation.
• Hands-on experience administering or supporting SAP GRC Access Control and/or Process Control
• Experience conducting user access reviews, Segregation of Duties (SoD) analysis, or Identity Governance activities.
• Experience supporting SailPoint Identity Governance Administration (IGA) or similar access governance platforms.
• Experience producing compliance reports, audit documentation, and remediation tracking.
• Strong analytical, problem-solving, and documentation skills.

Preferred Skills/Experience

• Experience with cybersecurity compliance, vulnerability management, and risk reporting.
• Knowledge of governance, risk, and compliance (GRC) frameworks and integrated risk management practices.
• Familiarity with regulatory requirements including SOX, access governance, and IT controls frameworks.
• Experience using compliance monitoring, compliance analytics, or reporting tools.
• Exposure to audit methodologies, risk assessments, and control effectiveness evaluations.
• Experience working with regulatory technology (RegTech) or integrated risk management solutions.
• Relevant certifications such as CISA, CRISC, CISSP, CIA, CGRC, SAP GRC, or SailPoint certifications.
• Experience working within large enterprise or highly regulated environments.
• Strong stakeholder engagement and communication skills with the ability to influence cross-functional teams.

Travel, Work Environment & Physical Requirements

• Primarily office-based or remote/hybrid work environment depending on business needs.
• Occasional travel may be required for team meetings, training, audit activities, or business-related events.
• Ability to work at a computer and participate in virtual meetings for extended periods.