Risk Analyst

Senior Risk Management Professional - SOX Controls, Oversight & Advisory

Location: Atlanta, GA

Salary-$100k with benefits.

Onsite and fulltime only

Certifications in relevant areas are good to have, such as:

CISA

CPA

CIA

CRISC

Role Overview

The Senior Risk Management Professional will be responsible for defining, designing, independently reviewing, and strengthening SOX Information Technology controls across the organization. This role demands deep expertise in SOX control design and operating effectiveness, deficiency management, evidence validation, audit support, and remediation advisory.

The role functions as an independent second line assurance ("watch the watchers"), providing oversight over control design, execution, testing quality, audit readiness, and ensuring SOX compliance KPIs are strictly met.

Key Responsibilities

SOX Controls Design, Review & Oversight

Define, design, review, and independently assess SOX Information Technology controls.

Perform detailed reviews of existing controls to identify:

Control design gaps or inadequacies

Misalignment between risks and controls

Ineffective, redundant, or unsustainable controls

Evaluate Design Effectiveness (DE) to ensure controls sufficiently address identified SOX risks.

Assess Operating Effectiveness (OE) to identify:

Execution inconsistencies

Control failures

Tool, automation, or manual dependency gaps

Independent Control Review & Evidence Validation (Watcher Role)

Act as an independent reviewer of control execution, testing approaches, and conclusions performed by control owners or first line teams.

Perform rigorous SOX evidence validation, ensuring:

Evidence completeness, accuracy, and relevance

Proper period coverage and traceability

Alignment to control objectives and audit expectations

Identify OE gaps, testing weaknesses, documentation gaps, and unsupported conclusions and recommend corrective actions.

Ensure evidence quality meets external audit defensibility standards.

Audit Query, Observation & Issue Management

Actively support internal and external audit queries, walkthroughs, and information requests.

Review audit questions and observations for technical accuracy and risk relevance.

Support management in drafting clear, risk based responses to audit observations.

Assess audit observations to determine:

True control deficiencies vs documentation gaps

Root causes and systemic issues

Track and monitor audit observations through closure.

Deficiency Assessment & Root Cause Analysis

Identify and assess SOX control deficiencies, including:

Design deficiencies

Operating effectiveness deficiencies

Evidence and documentation deficiencies

Perform detailed root cause analysis covering people, process, system, and governance aspects.

Evaluate deficiency severity and potential impact in coordination with stakeholders and auditors.

Remediation & Preventive Advisory

Provide remediation advisory support to ensure corrective actions are:

Risk aligned

Sustainable

Preventive in nature

Recommend enhancements or necessary adaptations to controls based on:

Audit feedback

Repeated deficiencies

Changes in systems, processes, or compliance expectations

Review remediation evidence and validate effective closure of deficiencies.

Ensure remediation actions meet audit expectations and prevent future recurrence.

SOX Compliance Governance & KPI Management

Ensure SOX compliance KPIs are strictly met, including but not limited to:

Timely execution of controls

Quality and completeness of evidence

On time audit responses

Closure of audit observations and deficiencies within agreed timelines

Monitor SOX performance metrics and highlight risks or slippages proactively.

Drive continuous improvement in SOX control maturity and audit readiness.

Stakeholder & Control Owner Engagement

Work closely with Control Owners, IT teams, and business stakeholders.

Provide guidance, challenge control execution constructively, and promote accountability.

Improve SOX awareness, execution discipline, and documentation practices across teams.

Act as a trusted advisor to leadership on SOX risk posture and control effectiveness.

Required Skills & Competencies

Extensive expertise in SOX Information Technology controls

Strong mastery of Design Effectiveness and Operating Effectiveness evaluations

Proven experience in detailed control reviews, OE gap analysis, and evidence validation

Strong capability in audit support, observation management, and remediation advisory

Ability to operate independently in a second line / oversight role

Excellent analytical, communication, and stakeholder management skills

Education, Experience & Certifications

Bachelor's degree in Information Systems, Accounting, Finance, Risk Management, or related field

8-12+ years of experience in SOX compliance, IT risk management, internal audit, or controls advisory

Diverse Lynx LLC is an Equal Employment Opportunity employer. All qualified applicants will receive due consideration for employment without any discrimination. All applicants will be evaluated solely on the basis of their ability, competence and their proven capability to perform the functions outlined in the corresponding role. We promote and support a diverse workforce across all levels in the company.