Senior Analyst, IT Compliance & Controls
Los Angeles, California, United States; United States
Full Time Senior-level / Expert USD 120K - 130K
- Lead and/or support IT compliance initiatives and the SOX 404(b) compliance program to ensure internal controls are in place and in support of other compliance frameworks, where appropriate
- Coordinate with system, control, and process owners to develop, track, and implement remediation plans for audit deficiencies
- Collaborate with system, control, and process owners to facilitate, administer, and/or ensure the execution of periodic user access, delegation of authority, change management, and system and organization controls (SOC) reviews
- Develop business relationships and act as a liaison between system, control and process owners, and internal and external auditors to support the SOX compliance program (including planning, risk assessment, scoping, walkthrough, testing, and deficiency impact evaluation)
- Advise and assist project teams to meet compliance requirements for system implementations across the systems development life cycle (SDLC) and major IT environment changes
- Provide training, guidance and support to cross-functional teams to strengthen the IT internal controls environment by articulating control implementation and impact, and establishing considerations for applying security and compliance concepts to system, control, and process owners
- Collaborate with system, control, and/or process owners, to create and update policies, standard operating procedures, process, or data flow charts as required
- Perform IT internal controls compliance monitoring and reviews as applicable
- Bachelor's degree (BA/BS) from 4-year college or university in Computer Science, Information Technology, or related field preferred.
- 3+ years of experience in IT audit or compliance with a minimum of 1+ years of public accounting experience in IT SOX compliance, SOC 1/2 reporting, risk management, and/or general IT Audit
- Maintain a professional certification such as the CISA, CISSP, CISM, CPA, or equivalent
- Must have in-depth knowledge of SOX 404 compliance requirements and IT processes and controls (e.g., change management, access management, system security, incident management, backups/restores, systems development life cycle, business continuity, and disaster recovery)
- Experience with designing and implementing internal controls: IT general controls, application controls, automated controls (and interfaces), and key report controls
- Experience with developing standard operating procedures, process and data flow charts
- Excellent written and verbal communication skills with the ability to communicate effectively at all levels of the organization and develop strong, collaborative working relationships with internal stakeholders
- Must be able to think critically, demonstrate sound professional judgment and act with integrity
- Detail oriented and capable of adapting quickly in a fast-paced environment, displaying a "roll-up your sleeves" positive attitude.
- Direct experience with SOX readiness, establishing an IT controls environment, or establishing an IT compliance program
- Direct experience with remediating deficiencies and/or material weaknesses
- Direct experience with cloud computing platforms (AWS, Microsoft Azure), Github, Snowflake micro-service architecture, CI/CD frameworks, Single Sign On (SSO), and code reviews
- Big Four IT Audit experience
Tags: Audits AWS Azure CI/CD CISA CISM CISSP Cloud Compliance Computer Science GitHub Monitoring Risk assessment Risk management SDLC Snowflake SOC SOC 1 SOX SSO
Perks/benefits: Career development Competitive pay Equity / stock options Health care Insurance Parental leave Signing bonus
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.