Oracle Fusion ITGC Analyst

Oracle Fusion ITGC Analyst

Support Oracle Fusion Financials and ITGC processes in a global enterprise environment

Primary Responsibilities

• Serve as the CIS division-wide subject matter expert for IT General Controls SOX compliance technology controls and PCAOB audit readiness.
• Develop and maintain consistent ITGC policies standards control procedures documentation and evidence requirements across in-scope CIS applications and technologies.
• Partner with application owners administrators developers infrastructure teams Finance Internal Audit and other stakeholders to incorporate compliance by design into systems integrations changes and operational processes.
• Configure and administer Fastpath GRC for User Access Reviews segregation-of-duties monitoring access-risk analysis mitigating controls audit-log reviews and compliance reporting.
• Coordinate periodic access reviews and monitor privileged access service accounts segregation-of-duties conflicts and joiner mover and leaver controls.
• Oversee controls for system development change management configuration changes production migrations computer operations interfaces batch processing and audit logging.
• Conduct ITGC risk assessments control walkthroughs self-assessments compliance reviews and evaluations of control design and operating effectiveness.
• Identify control gaps perform root-cause analysis and coordinate sustainable remediation of deficiencies and recurring exceptions.
• Act as the primary CIS liaison with internal and external auditors for ITGC walkthroughs questionnaires evidence requests testing findings and remediation.
• Maintain an audit-ready documentation library including control narratives risk and control matrices access reviews change evidence test results SOC reports bridge letters and remediation records.
• Review third-party assurance reports and coordinate responses to exceptions complementary user-entity controls and other service-provider risks.
• Develop and deliver division-wide training job aids and guidance on SOX ITGC access governance change controls audit evidence and control-owner responsibilities.
• Provide CIS leadership with reporting on audit readiness control execution deficiencies remediation progress and emerging compliance risks.
• Stay current on SOX Section 404 PCAOB COSO COBIT ITGC identity governance cloud controls and public-company compliance requirements.

Requirement

• Typically requires 46 years of experience in IT audit IT risk and compliance SOX ITGC application controls financial systems or a related technology-control function.
• Demonstrated experience designing operating assessing or auditing ITGCs across enterprise applications and supporting technologies.
• Strong knowledge of access management privileged access segregation of duties change management system development computer operations interfaces configuration management and audit logging.
• Experience supporting SOX Section 404 compliance or audits of internal control over financial reporting.
• Experience conducting risk assessments control walkthroughs self-assessments control testing deficiency evaluations and remediation validation.
• Experience coordinating with internal and external auditors and preparing complete reliable and timely audit evidence.
• Experience developing policies procedures control narratives risk and control matrices testing documentation and audit workpapers.
• Familiarity with GRC identity-governance access-certification audit-management or compliance-monitoring applications.
• Understanding of SOC reports bridge letters complementary user-entity controls and third-party assurance requirements.
• Strong analytical project-management communication and stakeholder-influencing skills.
• Ability to work independently and coordinate compliance activities across global cross-functional teams.
• Bachelors degree in Accounting Finance Information Systems Computer Science Cybersecurity Information Technology or a related field.
• Equivalent combinations of education training professional certifications and relevant experience may be considered.
• Youre curious passionate authentic and accountable. These are our values and influence everything we do.

Mandatory Technical Skills

• CISA CIA CPA CRISC CISM CISSP CGEIT or a comparable audit risk security or compliance certification.
• Experience supporting PCAOB-regulated audits in a public company or public-company-readiness environment.
• Experience in IT audit technology risk or controls advisory with a major accounting or professional-services firm.
• Hands-on experience administering Fastpath GRC or a similar enterprise GRC platform.
• Experience with Oracle Fusion Cloud ERP Oracle EPM Cloud Workday Boomi Microsoft Azure Active Directory databases data warehouses or other enterprise technologies.
• Experience with identity governance role-based access privileged-access management service accounts and joiner mover and leaver controls.
• Experience evaluating automated controls system-generated reports interfaces data integrity and information produced by the entity.
• Working knowledge of SQL reporting tools data analytics or continuous-control monitoring.
• Experience supporting multinational technology environments shared services subsidiary audits or geographically distributed teams.
• Demonstrated ability to train and guide technical and nontechnical stakeholders on SOX and ITGC responsibilities.
• Strong customer-service orientation with the ability to challenge ineffective practices and escalate unresolved compliance risks.