Job Description
The primary focus of this role will be to conduct quarterly testing activities for SOX IT controls. The successful candidate will be responsible for utilizing database and Active Directory (AD) auditing tools to perform thorough access reviews across various applications, operating systems, and databases. They will monitor established controls, identify and report any discrepancies, and ensure that our operations are compliant with SOX requirements.
Strong understanding of IT systems, particularly AD and SQL, and able to communicate effectively with various departments to enforce compliance policies and procedures. Day-to-day duties will include the review and analysis of our current controls, making recommendations for improvement, and leading the remediation of any issues identified during testing.
Key Responsibilities: - Perform quarterly SOX IT control testing to ensure ongoing compliance with regulatory requirements.
- Use specialised audit and monitoring tools to assess controls across databases and Active Directory environments.
- Conduct periodic access reviews covering applications, operating systems, and databases to validate appropriate access and segregation of duties.
- Identify, investigate, and document control gaps, discrepancies, and process issues, and track remediation actions to closure.
- Collaborate with IT, Security, and business stakeholders to strengthen and continuously improve the control environment.
- Develop, maintain, and document compliance processes, procedures, and standards, and actively socialise them with relevant stakeholders.
- Manage audit activities through the GRC platform, ensuring accurate, timely, and auditable responses to internal and external auditors.
- Provide clear, practical, and actionable feedback on control findings and remediation requirements.
- Maintain up-to-date knowledge of SOX, IT controls, and relevant compliance standards and regulations.
Qualifications and Experience: - Bachelor’s degree in Information Technology, Computer Science, Finance, or a related field.
- A minimum of 5 years of experience in IT auditing or compliance, with a preference for those who have experience in a SOX-controlled environment.
- Proficient with AD and SQL systems.
- Excellent communication skills, capable of explaining complex compliance issues clearly and effectively.
- Strong attention to detail and accuracy.
- Experience with database and AD auditing tools.
- Familiarity with access review processes in various systems and environments.
- Certification in Information Systems Auditing (e.g., CISA) is highly desirable.
Additional Info: - M to F, 7am to 4pm
- Homebased
