Senior IT Audit Analyst

Job Title :  Senior IT Audit Analyst

Location: Boston MA
Duration: Long Term
Job Type: Contract

Key Responsibilities

·        Maintain and update IT compliance documentation, policies, procedures, control narratives, and CMDB-related information.

·        Execute and document SOX IT control testing, identify control deficiencies, track findings, and support remediation activities.

·        Manage periodic user access reviews, including provisioning, deprovisioning, role-based access, and privileged access controls.

·        Monitor and support IT change management controls, ensuring appropriate approvals, testing, implementation, and documentation.

·        Ensure SDLC and system implementation documentation is complete, accurate, and retained for audit purposes.

·        Review SOC 1 and SOC 2 reports for critical third-party vendors and maintain appropriate vendor compliance records.

·        Support internal and external audits by gathering evidence, responding to audit requests, coordinating with stakeholders, and resolving exceptions.

·        Identify opportunities to improve compliance processes, controls, and reporting through automation and workflow optimization.

·        Utilize tools such as Microsoft Power Automate to streamline compliance processes and reduce manual activities.

·        Partner with IT and business teams on system implementations, upgrades, process changes, and related compliance requirements.

·        Maintain accurate compliance records and ensure controls remain aligned with organizational policies and regulatory requirements.

Required Qualifications

·        Strong experience in IT Compliance, IT Audit, SOX, IT Risk, IT or GRC.

·        Hands-on experience with SOX IT control testing and remediation.

·        Strong understanding of IT General Controls (ITGC), including:

·        Access Management

·        Change Management

·        SDLC Controls

·        User Access Reviews

·        Privileged Access Controls

·        IT Operations Controls

·        Experience reviewing SOC 1/SOC 2 reports and assessing third-party/vendor controls.

·        Experience supporting internal and external audits, including evidence collection and remediation tracking.

·        Strong documentation, analytical, organizational, and stakeholder management skills.

·        Excellent communication skills with the ability to work effectively across IT, business, audit, and compliance teams.