Compliance IT Controls Analyst

Job Title: Compliance / IT Controls Analyst

Location:

This position must sit in one of the following locations once converted:

• Smithfield VA
• Chicago Illinois
• Overland Park Kansas
• Cincinnati Ohio

Description: We are seeking a skilled Compliance / IT Controls Analyst to join our security team for a Fortune 500 company. In this role you will provide expertise in IT controls and audit focusing on IT Compliance related to IT Operations Security Change Management Access Account Management and Financial applications automated controls. Collaboration with internal and external auditors project management and organizational skills are essential for success in this position.

Responsibilities:

• Conduct IT General Computer Controls testing in collaboration with internal and external auditors.
• Monitor and ensure completion of action plans for issues identified during SOX and ICFR Assessment.
• Project management and organizational skills with strong interpersonal written and oral communication skills.
• Document IT controls including control objectives control activities and test steps to address risks.
• Extract required audit artifacts from SAP systems and collaborate with IT Control Performers to document Internal Control over Financial Reporting (ICFR) requirements.
• Participate in creating and updating policies procedures IT control narratives and controls documentation.
• Perform IT Risk Assessments to ensure compliance with NIST 800 rev 5 frameworks.
• Conduct Compliance monitoring controls including overseeing access removal privileged access review system configuration controls review and semiannual user access recertification process.
• Collaborate with IT Control Owners to communicate audit and control findings and obtain the status on remediation plans.

Enterprise Required Skills:

• SOX compliance Security SAP SQL NIST Financial reporting.

Top Skills:

• Demonstrated capability to perform ITGC SOX Testing.
• Strong knowledge of controls for SAP systems Cloud systems Active Directory SQL databases and Linux systems preferred.
• Ability to extract necessary data from SAP systems.
• 3 years of experience leading IT compliance/audits and performing risk assessments in a multinational organization preferably with a Big 4 Public Accounting firm in the United States.
• Knowledgeable with frameworks such as NIST 80053 rev4 or 5 NIST Cybersecurity Framework PCI DSS GDPR COBIT.
• Sound judgment and ability to maintain utmost confidentiality.
• Undergraduate degree required.
• CISA certification preferred.