IT General Controls (ITGC) Analyst
Location: Lisle, IL (onsite Monday-Thursday)
Employment Type: Contract-to-Hire
Work Arrangement: Hybrid, based on location
Key Skills: IT Controls, SOX (Sarbanes Oxley), 3-8 years of experience
Company Overview
A national leader in post-secondary education and a leading provider of professional talent to the healthcare industry. The organization supports multiple institutions focused on higher education, healthcare, and professional development.
Position Overview
We are seeking an IT General Controls (ITGC) Analyst to support the IT Risk Management (ITRM) team. This role focuses on the governance, monitoring, and continuous improvement of IT controls, with a primary emphasis on IT SOX compliance and IT General Controls.
The ITAnalyst coordinates recurring compliance activities, works directly with IT control and system owners, supports Internal Audit, maintains control documentation, monitors remediation efforts, and helps ensure controls are executed effectively and supported by appropriate audit evidence.
The ideal candidate has hands-on experience with ITGCs in a SOX-regulated environment, strong organizational and analytical skills, and the ability to independently engage control owners, challenge incomplete information, and drive timely resolution of control issues.
Key Responsibilities
ITGovernance and SOX Compliance
- Coordinate the recurring IT SOX and ITcompliance calendar, including control certifications, monitoring activities, and evidence-readiness reviews.
- Manage control-owner attestations, documentation updates, follow-ups, and identified exceptions.
- Monitor control execution and maintain accurate control documentation, governance records, and the IT controls matrix.
- Participate in SOX control walkthroughs to understand existing processes, assess controls, and provide guidance to stakeholders.
- Ensure control documentation and governance activities align with applicable policies, regulatory requirements, and industry standards.
Control Monitoring, Testing, and Audit Support
- Work directly with IT control owners, system owners, and Internal Audit to coordinate audit activities and support audit readiness.
- Provide guidance on control requirements, supporting documentation, and audit evidence expectations.
- Track control execution, testing requests, deficiencies, and remediation activities.
- Assess control design and operating effectiveness through monitoring, readiness reviews, and analysis.
- Identify control weaknesses, evidence gaps, and opportunities to improve control effectiveness and efficiency.
Issue Remediation and Risk Reporting
- Collaborate with IT teams to develop corrective action plans and drive timely resolution of control deficiencies.
- Monitor remediation progress, follow up on outstanding commitments, and escalate missed deadlines or control concerns to the Senior IT Risk Manager.
- Prepare management reporting on control status, compliance activities, identified issues, and remediation progress.
- Support IT Risk Management working group meetings by preparing materials, documenting updates, and communicating relevant findings.
Process Improvement and Stakeholder Enablement
- Recommend and implement improvements to ITgovernance processes, procedures, and supporting tools.
- Develop training materials and guidance to help IT control owners understand their responsibilities and evidence requirements.
- Contribute to continuous improvement of the IT controls matrix and the overall ITgovernance program.
- Stay current on IT controls best practices, applicable frameworks, regulatory requirements, and industry standards.
- Support broader ITRM projects, reviews, and training initiatives as needed, including leading efforts when required.
Required Qualifications
- Three or more years of hands-on experience supporting, testing, auditing, or overseeing IT General Controls in a SOX-regulated environment.
- Solid understanding of Sarbanes-Oxley (SOX) compliance and IT controls over financial reporting.
- Working knowledge of internal control concepts, including control identification, design effectiveness, and operating effectiveness.
- Familiarity with relevant frameworks and standards, such as COSO, COBIT, NIST, ISO 27001, and ITIL.
- Ability to work independently with IT control owners, ask probing follow-up questions, challenge incomplete or inconsistent information, and escalate concerns professionally.
- Strong written, verbal, and listening skills, with the ability to communicate effectively across technical and business teams.
- Excellent organizational, analytical, critical-thinking, and problem-solving skills.
- Project coordination and management skills, including the ability to prioritize activities and drive deliverables to completion.
- Strong attention to detail and the ability to manage multiple priorities in a fast-paced environment.
- Intermediate to advanced proficiency with Microsoft 365 applications, particularly Excel, PowerPoint, Word, SharePoint, and Teams.
- Bachelor's degree in a related field.
