Senior SOX IT Compliance Analyst

Location: Oakland, CA

Duration: 3 Months

Responsibilities:

• Provide guidance and act as a subject matter expert to Technology and Security Compliance personnel, system owners, and business process owners on the identification, documentation, testing, and remediation of key controls for SOX IT processes.
• Evaluate, develop, and establish appropriate testing objectives and test plans for the in-scope IT General Controls (ITGCs).
• Perform walkthroughs of medium to complex system processes and identify gaps in controls.
• Assist in coordinating SOX audits performed by external auditors.
• Coordinate with system owners to monitor the progress of open SOX control deficiencies and remediation efforts.
• Evaluate ITGCs’ deficiencies in accordance with the company's framework for evaluating control deficiencies and identify associated financial statements impact.
• Perform and document IT entity level controls testing.
• Perform quality assurance reviews on completed SOX IT testing documentation.
• Assist with the preparation of quarterly deliverables for Leadership and Audit Committee.
• Train new or existing process owners on the internal control compliance processes.
• Manage WDesk SOX module to facilitate quarterly SOX testing and deliverables.

Requirements:

• Bachelor’s degree in Management Information System, Computer Science, Accounting/Business, or equivalent experience.
• Minimum 5 years of relevant experience in SOX IT Compliance or other applicable areas, including public accounting experience.
• Certified Information Systems Auditor (CISA).

Preferred Skills:

• Master’s Degree in Management Information System, Computer Science, or job-related discipline or equivalent experience.
• Previous experience in Big 4 Public Accounting or in the energy or public utility industry.
• Experience with internal/external audits.
• Certified Internal Auditor (CIA), Certified Information Systems Security Professional (CISSP), or Certified Public Accountant (CPA) or equivalent.
• Solid understanding of AS5, COBIT framework, and COSO framework.
• Knowledge of IT systems, ITGCs, control impact on IT and business processes, and SOD conflicts with IT access.
• Ability to assess potential impact of deficiencies, provide control advice for moderate to complex processes, and positively influence system owners on control solutions.
• Ability to prioritize and perform SOX activities and communicate findings both in written and verbal form that is cohesive, understandable, and actionable to stakeholders.
• Robust understanding of the SOX regulation, the company’s standards and procedures, and industry best practices to provide control advice to stakeholders.
• Ability to ask detailed, probing questions, and to utilize research and issue resolution skills.
• Ability to effectively manage multiple diverse tasks and adhere to tight deadlines.
• Ability to initiate system reviews/walkthroughs, identify gaps, and recommend appropriate controls with limited guidance.