Senior IT Compliance Analyst

At CooperVision, a division of CooperCompanies, we're driven by a unifying purpose to help people to experience life's beautiful moments. We are connected through our shared values - dedicated, innovative, friendly, partners, and do the right thing. As a leading global manufacturer of contact lenses, we are committed to helping improve the way people see each day. Through our diverse lens portfolio, we tackle the toughest vision challenges - including astigmatism, presbyopia, and childhood myopia. We offer the most complete collection of spherical, toric, and multifocal products available, enabling us to fit 99% of all contact wearers. Learn more at www.coopervision.com.

Job Summary:

The Senior IS Compliance Analyst will be responsible for SOX readiness analysis for CooperVision applications being brought into scope for SOX. This work will involve designing IT SOX controls in collaboration with application owners, documenting the design, and training the outsource team responsible for SOX IT control activities for the handover of the performance of control execution and documentation going forward. The Senior IS Compliance Analyst will also be responsible for evidence gathering and facilitation of testing for all IPE and ITACs in scope for the SOX audit as well as related communications with internal and external auditors and business units and stakeholders. The Senior IS Compliance Analyst will have a critical impact on the department's ability to function.

Knowledge, Skills and Abilities:

• Understanding of the Sarbanes-Oxley Act of 2002 and IT general controls (ITGCs). This includes expertise in assessing and implementing access management, change management, data center controls and IT operations controls.
• Demonstrated expertise in IT application controls (ITACs), including the ability to document and test these controls
• Strong experience evaluating and testing Information Produced by Entity (IPEs), including completeness and accuracy of IPE outputs
• Experience with SOX IT audit processes and documentation
• Experience reviewing SOC1, SOC 2, ISO and other audit reports
• Familiarity with IT internal control frameworks
• Advance proficiency in Microsoft Excel, including complex formulas and data analysis.
• Strong understanding of technology and ability to suggest technological solutions
• Ability to effectively prioritize and execute tasks in a fast-paced environment
• Adapts readily to changes in workload, staffing and scheduling
• Detailed-oriented, independent and thorough in examination and analysis
• Ability to explain technical concepts to non-technical audiences
• Excellent analytical and problem-solving skills
• Excellent written, oral, and interpersonal communication skills
• Highly self-motivated and self-directed
• Extensive experience working in a team-oriented environment in a collaborative manner

Work Environment:

• Normal office environment.

• Sedentary to light physical effort necessary to perform the job

• Extensive contact with employees in the US and global locations, and with external vendors and auditors

Experience:

• 3-4 years IT internal controls experience required.

Education:

• Bachelor's degree in business, accounting, finance, computer science, information systems or a related discipline required, or equivalent combination of education and experience.
• CISA, CIA, CPA or equivalent certification preferred

We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. We are proud to be an equal opportunity workplace.

For U.S. locations that require disclosure of compensation, the starting base pay for this role is between $94,220.00 and $125,626.00 per year and may include cost of living adjustments. The actual base pay includes many factors and is subject to change and modification in the future. This position may also be eligible for other types of compensation and benefits.

#LI-AK1

• Designs, implements and monitors Sarbanes Oxley (SOX) IT application and general computer controls for all new applications onboarded to CooperVision's SOX program globally in collaboration with business and IT teams
• Obtains and reviews technical architectural diagrams for applications in scope and keeps list of in scope servers up to date
• Trains outsourced team responsible for IT SOX control performance on new controls to hand over on-going control execution
• Leads SOX audit IPE and ITAC walkthroughs and evidence gathering for SOX audit working closely with internal and external auditors, business units and IT stakeholders
• Communicates issues with control performance to Management in a timely manner and leads any necessary remediation or mitigation activities
• Performs data quality assurance activities over the completeness and accuracy of data queries and other key reports or IPEs used for control execution
• Works closely with internal and external auditors during the annual SOX audit
• Works closely with global departments involved in IT controls related to SOX such as Finance, IT Security, Networking, Legal, etc.
• Looks for opportunities to streamline control processes utilizing technology
• Documents audit support procedures and process flows when needed
• Provides training to employees on IT control processes and documentation as needed

Travel Requirements:

International travel up to 10%, off-hour meetings

• Designs, implements and monitors Sarbanes Oxley (SOX) IT application and general computer controls for all new applications onboarded to CooperVision's SOX program globally in collaboration with business and IT teams
• Obtains and reviews technical architectural diagrams for applications in scope and keeps list of in scope servers up to date
• Trains outsourced team responsible for IT SOX control performance on new controls to hand over on-going control execution
• Leads SOX audit IPE and ITAC walkthroughs and evidence gathering for SOX audit working closely with internal and external auditors, business units and IT stakeholders
• Communicates issues with control performance to Management in a timely manner and leads any necessary remediation or mitigation activities
• Performs data quality assurance activities over the completeness and accuracy of data queries and other key reports or IPEs used for control execution
• Works closely with internal and external auditors during the annual SOX audit
• Works closely with global departments involved in IT controls related to SOX such as Finance, IT Security, Networking, Legal, etc.
• Looks for opportunities to streamline control processes utilizing technology
• Documents audit support procedures and process flows when needed
• Provides training to employees on IT control processes and documentation as needed

Travel Requirements:

International travel up to 10%, off-hour meetings