Job Title: Security Analyst
No. of Positions: 1
Start Date: August 11 2025
End Date: February 13 2026
Position Type: Contract
Location: Seattle WA (Partial Remote)
Primary Skills: SOX Azure Oracle
Role Summary:
As a GRC Compliance Specialist you will support and manage IT General Controls (ITGCs) related to SOX 404 compliance. Youll work closely with cybersecurity audit teams and business stakeholders to ensure proper control design operation and evidence collection. This role involves compliance coordination remediation tracking stakeholder education and audit preparation.
Key Responsibilities:
- Lead and support the IT SOX 404 program .
- Document SOX control narratives and test ITGC operating effectiveness.
- Act as SME for SOX IT compliance guiding business and IT stakeholders.
- Facilitate walkthrough meetings evidence gathering and audit issue resolution.
- Identify and monitor remediation of control deficiencies.
- Track and automate audit workflows using GRC tools (e.g. ServiceNow).
- Assist in quarterly certifications and attestations.
- Provide reports metrics and dashboards to demonstrate SOX program effectiveness.
- Collaborate with architecture and technology teams to assess SOX impacts of new systems or changes.
- Apply risk-based approaches to audits and control testing.
- Maintain documentation and centralized repositories for audits.
Required Qualifications:
- 5 years of experience in Security GRC IT Audit or SOX Compliance.
- Big 4 IT Audit background or similar highly preferred.
- Deep knowledge of SOX 404 ITGCs and risk-based audit methodologies.
- Proven experience evaluating and testing controls in retail environments.
- Familiar with ITGC domains: access control change management IT operations and SDLC.
- Experience with cloud platforms (Azure AWS) and SaaS compliance implications.
- Proficiency with Oracle EBS Retail Management Systems and other retail tech.
- Skilled in using GRC tools like ServiceNow for audit and evidence workflows.
- Ability to communicate and influence cross-functional stakeholders.
- Demonstrated success in managing audits remediation and control tracking.
- Comfortable working across multiple time zones and in a fast-paced environment.
Preferred Certifications:
- CISA Certified Information Systems Auditor.
- CPA Certified Public Accountant.
- CIA Certified Internal Auditor.