Sr Analyst, IT Audit

About the Role

What You'll Do

What You'll Do:

• Execute IT SOX testing, including IT General Controls (ITGCs) (access, change management, IT operations) and IT Application Controls (ITACs) across in-scope systems.

• Perform control design and operating effectiveness testing, ensuring accuracy, completeness, and adherence to SOX and internal audit standards.
• Support annual SOX planning and scoping activities, including identification of in-scope systems, applications, and key reports.
• Conduct and document walkthroughs, including preparation of process narratives, flowcharts, and risk and control matrices (RCMs).
• Coordinate with control owners to request, collect, and validate audit evidence, ensuring timely and high-quality submissions.
• Evaluate system-generated reports (IUCs) for completeness and accuracy, including testing of report logic and data sources.
• Identify control deficiencies, perform root cause analysis, and support evaluation of impact to ICFR.
• Track remediation efforts, perform retesting of controls, and validate closure of identified issues.
• Partner with IT, Security, and business stakeholders to clarify control requirements and drive timely resolution of issues.
• Support external audit activities, including responding to requests, preparing documentation, and addressing follow-up questions.
• Maintain accurate and organized audit documentation in accordance with internal standards and SOX requirements.
• Contribute to continuous improvement initiatives, including standardization of testing approaches and enhancement of documentation quality.
• Identify opportunities to improve efficiency through automation, data analytics, and process optimization.
• Provide guidance and informal mentorship to junior team members, supporting knowledge sharing and team development.

Who You Are

Who You Are:

Required:

• Bachelor’s degree in Information Systems, Computer Science, Accounting, or a related field.
• 3–5 years of experience in IT audit, SOX compliance, or IT risk management.
• Demonstrated experience performing control testing (design and operating effectiveness), including walkthroughs, evidence evaluation, and documentation.
• Experience with risk and control matrices (RCMs), narratives, and flowcharts.
• Working knowledge of IT environments, including applications, databases, infrastructure, and cloud platforms (e.g., AWS, Azure).
• Understanding of IT control frameworks and domains (e.g., access management, change management, IT operations) and familiarity with frameworks such as NIST, ISO 27001, or COBIT.
• Strong analytical and problem-solving skills, with the ability to identify issues and assess risk implications.
• Effective communication and interpersonal skills, with the ability to collaborate with stakeholders and manage audit requests.
• Strong organizational skills and attention to detail, with the ability to manage multiple priorities and meet deadlines.

Nice to Have:

• Professional certification such as CISA, CPA, CRISC, or progress toward certification.
• Experience working with external auditors and supporting SOX audits.
• Familiarity with SOC reports, CUECs, and reliance considerations.
• Experience with audit tools, data analytics, or GRC platforms (e.g., AuditBoard/Optro).
• Exposure to ERP systems (e.g.,  Oracle) or retail/consumer industry environments