Work with the company s external auditor in leading walkthroughs, test of design and operational effectiveness of IT general controls;
Coordinate and perform SOX program testing/auditing of IT General Controls with control owners and management;
Evaluate IT General Control deficiencies for impact and perform risk assessments and root cause analysis to determine appropriate management actions. Monitor management s associated remediation efforts to closure, including review of supporting evidence;
Create and maintain supporting documentation for SOX compliance testing;
Engage and deliver appropriate workpapers timely to external auditors;
Engag e , develop relationships and maintain open communication with a wide variety of cross functional internal resources and management as appropriate;
Assess new products, systems, databases or changes to existing processes to identify and evaluate financial risks;
Recommend process efficiencies to drive effective SOX IT compliance;
Assist second line of defense organizations in ensuring that approved IT General controls are embedded in current processes;
Support development and delivery of training programs to educate development teams and other stakeholders on compliance requirements, best practices, and policies;
Foster a culture of compliance awareness and accountability within the organization.
Qualifications:
CISA, CISSP, CISM, ISO 27001, and other security certifications preferred;
5 years relevant experience;
Graduate Degree in Computer Science, Information Technology, or any other related discipline or commensurate work experience or demonstrated competence;
Strong IT SOX & audit experience, particularly IT controls;
Demonstrated understanding of information management systems and infrastructure including IT processes, tools, controls;
Technical acumen and the ability to understand and interpret technical specifications;
Ability to meet stringent deadlines in a fast-paced environment, deliver quality product and work well in a dynamic team environment;