IT Internal Controls Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Act as a subject matter expert on IT internal controls, offering guidance and education to both IT and business partners.

• Support the testing of IT SOX controls, which includes IT general controls (ITGCs), automated controls (ITACs), and key report evaluations.

• Lead walkthroughs of essential business processes and their underlying technologies, working alongside IT and business process owners to create effective and efficient controls.

• Develop and maintain comprehensive IT SOX documentation, encompassing IT process flowcharts, risk and control matrices, and testing workpapers.

• Perform IT risk assessments to identify, assess, and prioritize technology-related risks impacting financial reporting and business operations.

• Analyze IT control deficiencies to ascertain root causes and impacts, collaborating with process and control owners to formulate and monitor effective remediation strategies.

• Review controls and processes for potential opportunities to utilize automation and new technologies, thereby decreasing manual effort and enhancing control efficiency.

• Assist in executing the audit plan, which includes conducting risk assessments and coordinating internal audit evaluations.

• Act as a liaison for external auditors and facilitate documentation requests.

⛳️ Requirements

• A bachelor's degree in management information systems, computer science, accounting, or a related discipline.

• Possession of a Certified Information Systems Auditor (CISA), Certified Public Accountant (CPA), or Certified Internal Auditor (CIA) designation is highly preferred.

• 1-3 years of experience in IT audit, IT internal controls, or public accounting with a focus on technology, ideally within the insurance or financial services sector.

• Experience in supporting a SOX compliance program, including involvement in IT risk assessments, control design, and documentation.

• Familiarity with testing automated controls and key reports is advantageous.

• Experience in a public company setting is beneficial.

• Strong understanding of the Sarbanes-Oxley Act, COSO framework, and US GAAP as they pertain to IT controls.

• Outstanding analytical abilities to identify, analyze, and interpret intricate IT and business processes and risks.

• Demonstrated capability to drive IT process enhancements and implement automated control solutions.

• Excellent communication skills, both written and verbal, with the capacity to effectively present complex IT risk information to all organizational levels.

• Strong leadership, interpersonal, and collaborative abilities to influence change within IT and business teams.

• A solid understanding of cybersecurity and information security frameworks (e.g., NIST, COBIT).

🏝️ Benefits

• Annual incentive compensation.

• Medical, dental, vision, and life insurance.

• Accident, critical illness, and short-term disability insurance.

• Retirement plans with employer contributions.

• Generous time-off program.

• Programs designed to support employee well-being and financial security.