Senior Business Analyst SOX Controls

Overview

On Site

Full Time

Part Time

Accepts corp to corp applications

Contract - W2

Contract - Independent

Skills

Design Documentation

Internal Control

Risk Assessment

Identity Management

Change Management

Computer Operation

Internal Auditing

Business Process

Financial Reporting

Regulatory Compliance

FOCUS

Technical Drafting

Testing

SOD

ITGC

Communication

Documentation

Sarbanes-Oxley

Auditing

EMC RSA Archer

ServiceNow

SAP GRC

Enterprise Resource Planning

SAP

Oracle

CISA

Certified Public Accountant

Job Details

Job Summary

We are seeking a highly experienced Senior Business Analyst - SOX Controls with deep expertise in Sarbanes-Oxley (SOX) compliance and IT General Controls (ITGC). The ideal candidate will partner closely with Business and IT stakeholders to design, document, and implement effective internal controls, including Segregation of Duties (SoD) requirements. This role requires hands-on experience leveraging industry-standard SOX frameworks, best practices, and reusable templates to ensure audit readiness and regulatory compliance.

Key Responsibilities

Partner with Business and IT teams to design, document, and implement SOX-compliant internal controls.
Draft and maintain clear, effective control descriptions, including control objectives, risk statements, and testing procedures.
Develop and document Segregation of Duties (SoD) requirements aligned with business processes and system roles.
Perform SOX risk assessments to identify control gaps and remediation opportunities.
Support IT General Controls (ITGC) across access management, change management, and computer operations.
Create and maintain standardized SOX documentation, leveraging proven templates and best-practice frameworks.
Coordinate with internal audit, external auditors, and compliance teams during SOX testing and audits.
Ensure controls are properly mapped to business processes, applications, and financial reporting risks.
Assist in remediation planning and execution for control deficiencies.
Maintain audit-ready documentation and evidence repositories.

Required Qualifications

8+ years of experience as a Business Analyst or Compliance Analyst with strong focus on SOX controls.
Proven hands-on experience drafting SOX control narratives, risk-control matrices (RCMs), and testing procedures.
Strong experience defining and documenting Segregation of Duties (SoD) requirements.
Solid understanding of ITGC (Access, Change, Operations).
Experience working closely with Business, IT, and Audit teams.
Familiarity with SOX frameworks, standard practices, and reusable templates.
Excellent written and verbal communication skills with strong documentation abilities.

Preferred Qualifications

Experience supporting public company SOX audits.
Familiarity with GRC tools (e.g., Archer, ServiceNow GRC, AuditBoard).
Knowledge of ERP systems (SAP, Oracle, or similar).
Professional certifications such as CISA, CIA, CPA (preferred).

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.