Senior Associate - IT SOX Compliance

Trane Supply; Bengaluru; Hybrid; INR 1,500,000 - 2,800,000; Full time

Job summary

Trane Supply in Bengaluru seeks a Senior Associate - IT SOX Compliance to reinforce the global IT SOX program across key applications, servers, and databases. The role focuses on ITGC testing, risk assessment, and documentation, partnering with auditors and client teams to strengthen controls and regulatory compliance.

You will drive control testing, maintain narratives and flowcharts, and contribute to SDLC reviews, with onsite work Monday-Thursday at IBC Knowledge Park and flexible location on

Qualifications

• Bachelor’s degree in information technology, MIS, CS or related field.
• CISA certification preferred.
• Minimum 6 years’ combined IT SOX compliance experience.

Responsibilities

• Drive IT SOX 404 assessments with risk walkthroughs and testing of ITGCs.
• Evaluate design and operating effectiveness of IT controls; maintain narratives and flowcharts.
• Perform IT automated control testing for servers and databases.
• Prepare clear documentation and reports for stakeholders and auditors.
• Support SDLC reviews and coordinate remediation actions with management.

Skills

IT SOX Compliance

ITGC

Change Management

Access Management

Logical Security

Backup Scheduling

Backup Integrity

Privilege Access Review

SDLC

Identity and Access Management

Education

Bachelor’s degree in Information Technology / MIS / CS

CISA certification

Tools

MS Word

MS Excel

MS Outlook

Job description

The Senior Associate - IT SOX Compliance is an integral member of a global SOX Compliance & Internal Controls team that delivers the annual IT SOX program for the inscope key SOX applications, servers and databases. This role upholds the mission of the Assurance & Advisory Services department by ensuring a secure IT General and Automated controls environment, robust risk management practices, and regulatory compliances. As a trusted partner, the Senior Associate fosters client relationships, collaborates with fellow team members, assists & work with External Auditors, and contributes to the strategic growth of the team. The candidates drive and execute IT Control testing both for interim and roll- forward engagements at Application and Operating System layer, driving the enhancement of IT controls and overall IT governance, while supporting other IT SOX related reviews as needed to assess emerging threats and evolving IT regulatory risks. **Where is the work:** From Monday to Thursday, work onsite with your colleagues at IBC Knowledge Park, Bannerghatta Road, Bangalore. On Fridays, choose your work location, balancing what your work requires**What you will do:** · Drive and executes IT SOX 404 assessments, including risk assessment, walkthroughs, and testing of IT General Controls (viz. Access Management, Logical Security Settings, Change Management, and Computer Operations)· Work in a collaborative team environment and contribute to the successful delivery of IT SOX Compliance and Internal Controls review engagements, including preparing high-quality, accurate, well-supported documentation, and reports.. Evaluate the design and operating effectiveness of ITGC’s controls. Maintain up-to-date documentation, IT SOX Narratives, and process flowcharts.· Drive and execute the IT General control testing around inscope Servers and Databases around Privilege User Access Review, Logical Security Settings, Back-up scheduling and Monitoring, Back-up Integrity, etc.. Contribute and support the IT Automated Control testing, assess the completeness and accuracy of Annual User Access review at Enterprise level· Perform thorough reviews to analyze the adequacy of IT controls, internal controls over financial reporting, compliance with corporate standards, policies, and regulatory requirements (e.g., SOX, SOC 1/2, ISO, NIST).· Prioritize and assign tasks to ensure effective use of team resources and completion of work according to schedules and engagement objectives.· Assist in the evaluation of system implementations/upgrades by performing the System Development Life Cycle (SDLC) reviews.· Evaluate the IT control environments of the newly acquired entities to ensure adequate controls are in place to support the complete and accurate financial reporting.· Present findings to management at the conclusion of engagements, discuss deficiencies, and recommend remediation actions and opportunities for improvement.· Consult with IT clients to redesign/re-engineer processes; identify opportunities for optimizing operational efficiencies, strengthening internal controls, and reducing overall IT and Non-IT risk.· Opine on the adequacy of remedial actions taken to correct deficiencies and assist with issue closure processes.· Maintain adequate and current technical knowledge in areas such as IT general controls, business process controls, cybersecurity, and other areas as required.· Communicate technical findings clearly to both technical and non-technical stakeholders.· Respond to complex, escalated inquiries and ensure outstanding IT Audit & SOX issues are cleared.· Collaborate with other functions of global Assurance & Advisory Services and support ad-hoc activities and engagements as needed.**What you will bring:** · Bachelor’s degree in information technology, Management Information Systems, Computer Science, Chartered Accountant, or related IT graduates· Certified Information Systems Auditor (CISA) certification preferred.· Minimum of 6 years’ combined experience in IT SOX Compliances, with strong exposure to SOX compliance framework, internal controls review, IT risk and governance.· Knowledge of relevant IT domains including automated controls testing, system development lifecycle, SOC-1 report review, and identity and access management at Application and Operating System level (i.e., Servers and Databases).· Demonstrated ability for independent thinking and multi-tasking under aggressive deadlines with a high degree of accuracy in a complex “matrix” environment.· Proven ability to plan proactively, anticipate issues, and have excellent problem resolution records with little or no input or assistance.· Proficiency in computer applications including MS Word, MS Excel, and MS Outlook.