Business Analys- SOX & SOC

Duration --- 6+ Months

Candidates must have active LinkedIn.

Local Candidates

Job requirement:-

• Musts:

• IT Controls - Develop and maintain controls This is NOT cybersecurity this is IT control

• Writing IT controls to business processes validate controls

• Mid level 5 years

• Experience with any compliance tools a plus - Will train on their systems

• Strong MS tools experience

• SOX and SOC Sarbanes-Oxley compliance someone that has created the reports for the client not someone who has received and reviewed

• Flexible personality - Teams across the globe need to work different times on occasion for calls

• Financial services experience a plus definitely will look at all industries

• Testing experience IT DC test or control test

• Audit services experience

• Governance /risk assessment / documentation managing controls, working with stakeholders IT DC testing experience control validations from application perspective - Process improvement risk assessment action plans and apply Rich knowledge of IT control Technology Risk is important - Update and own controls understand and evaluate deficiencies resolutions A lot of experience in testing governance compliance require certifications although a plus

• Project Overview: SOC and SOX IT governance and testing
  
  Contractor's Role: IT control knowledge and desire to learn new things. Critical thinking and knowledge of the SOX and SOX compliance process.
  
  Experience Level:
  Level 2-[mid- 5-7+ years overall experience]
  
  
  Qualifications:
  IT control understanding and knowledge from a control developments and proficiency in IT control frameworks, risk assessment and testing perspective, motivated and driven. Excellent written and verbal communication skills, Attention to Detail
  CISA, CRISC, CISSP, or similar.
  
  Tasks & responsibilities:
  
  1. IT Control Analysis
  - Assess the current IT control environment.
  - Identify gaps and weaknesses in IT controls.
  - Develop and recommend improvements to enhance control effectiveness
  2. Compliance and Risk Management:**
  - Ensure IT controls comply with relevant regulations and standards (e.g., SOX, GDPR, ISO 27001).
  - Conduct regular risk assessments and audits.
  3. Process Improvement
  - Analyze business processes to identify opportunities for automation controls.
  - Collaborate with IT and business teams to design and implement IT control improvements.
  - Document new processes and ensure alignment.
  4. Reporting and Documentation:**
  - Prepare detailed reports on control assessments, testing results, and improvement of the testing approach.
  - Maintain documentation of IT controls, processes, and compliance requirements.
  - Present findings, impact analysis and recommendations to manager.
  5. Monitoring and Maintenance:**
  - Continuously monitor the effectiveness of SOX/SOC controls and tracking exceptions
  - Update control documentation as necessary to reflect changes in the IT environment or regulatory requirements.
  - Support internal and external audits by providing necessary documentation, escalations, and explanations.

E-Verified Company