About the Role
Grade Level (for internal use): 09
The Team
Our Global Financial Controls team is committed to ensuring the highest standards of financial integrity and regulatory compliance. What sets our team apart is our collaborative and dynamic approach to compliance.
- Teamwork and Collaboration: We work closely together, leveraging each team member's unique skills and expertise to achieve our common goals.
- Continuous Improvement: We are always looking for ways to enhance our processes and stay ahead of regulatory changes.
- Integrity and Accountability: We uphold the highest standards of integrity, ensuring that our work is accurate, transparent, and reliable.
- Innovation: We embrace innovative solutions and technologies to streamline our compliance efforts and improve efficiency.
- Commitment to Excellence: We are dedicated to maintaining excellence in all our compliance activities, ensuring that we meet and exceed regulatory requirements and deadlines.
Role Impact
The SOX Compliance Analyst – Logical Security & IT General Controls is responsible for the end‑to‑end execution of Logical Security controls supporting SOX compliance and the Global Financial Controls risk framework. This role requires hands‑on experience executing Logical Security IT General Controls (ITGCs) and a strong understanding of SOX compliance requirements, COSO principles, and internal risk frameworks.
The analyst will ensure that Logical Security controls across SOX in scope systems are designed appropriately, executed effectively, and compliant with SOX and enterprise risk standards, working closely with Technology, Finance, Internal Audit, and external auditors.
Role Responsibilities
- Financial System Security
- Execute end‑to‑end Logical Security controls for SOX in‑scope applications, mainly including:
- User Access provisioning
- Periodic access recertification
- Validate completeness, accuracy, and timeliness of Logical Security evidence
- Assess segregation of duties conflicts and support remediation efforts where required
- Evaluate role design, access models, and access restrictions for SOX relevant systems
- Support centralized access governance and Logical Security standardization initiatives
- Identify risks related to unauthorized access, excessive privileges, or control breakdowns impacting financial reporting
- Prepare/maintain up‑to‑date Standard Operating Procedures for each process and control execution
- SOX Compliance & Risk Framework Alignment
- Ensure Logical Security controls are aligned with SOX requirements, COSO principles, and internal risk framework standards
- Maintain and update Risk & Control Matrices, control narratives, and supporting documentation related to Logical Security
- Identify control gaps or deficiencies, support root‑cause analysis, and track remediation through closure
- Apply a risk‑based approach when evaluating control design and operating effectiveness
- Act as a key contact for external auditors for Logical Security and ITGC related SOX testing
- Support or engage in walkthroughs, testing, and PBC requests with internal/external auditors
- Support management reporting on SOX status, Logical Security issues, and remediation progress
- Continuous Improvement
- Identify opportunities to strengthen Logical Security control, maturity and consistency
- Contribute to SOX and ITGC methodology updates, templates, and control standards
- Leverage automation opportunities to reduce manual errors and time required for control execution
What We’re Looking For
Basic Required Qualifications
- Bachelor’s degree in Information Systems, Accounting, Finance, or a related field
- CISA preferred or CIA is a plus
Experience
- 2 to 3 years of experience in a similar role within a multi‑national organization
Technical Skills
- Strong understanding of SOX, COSO, and ITGC frameworks
- Hands‑on experience with Logical Security controls across systems such as ERP platforms (SAP, Oracle, Workday)
- Billing and revenue systems (SFDC, CPQ)
- Identity and Access Management tools (SailPoint, CyberArk, Okta)
- Ability to assess automated, IT‑dependent, and manual Logical Security controls
- Strong documentation, analytical, and issue‑assessment skills
Benefits
We take care of you, so you can take care of business. We care about our people. That’s why we provide everything you—and your career—need to thrive at S&P Global.
- Health & Wellness: Health care coverage designed for the mind and body.
- Flexible Downtime: Generous time off helps keep you energized for your time on.
- Continuous Learning: Access a wealth of resources to grow your career and learn valuable new skills.
- Invest in Your Future: Secure your financial future through competitive pay, retirement planning, a continuing education program with a company‑matched student loan contribution, and financial wellness programs.
- Family Friendly Perks: It’s not just about you. S&P Global has perks for your partners and little ones, too, with some best‑in‑class benefits for families.
- Beyond the Basics: From retail discounts to referral incentive awards—small perks can make a big difference.
Equal Opportunity Employer
S&P Global is an equal opportunity employer and all qualified candidates will receive consideration for employment without regard to race/ethnicity, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, marital status, military veteran status, unemployment status, or any other status protected by law. Only electronic job submissions will be considered for employment.
If you need an accommodation during the application process due to a disability, please send an email to EEO.Compliance@spglobal.com and your request will be forwarded to the appropriate person.