Governance Risk and Compliance I Analyst III

Hammerjack Pty Ltd; Philippines; On-site; PHP 1,200,000 - 2,000,000; Full time

Job summary

Hammerjack Pty Ltd is seeking a Senior IT SOX Compliance Analyst to support and strengthen its internal control environment across a global enterprise. The role emphasizes hands-on SOX ITGC testing, evidence review, and remediation in a fast-paced audit-driven setting.

The ideal candidate has 5–8 years in IT audit and SOX compliance, with strong control design and testing capabilities, and familiarity with ERP systems and AuditBoard or similar GRC tools.

Qualifications

• 5–8 years of hands-on experience in IT audit, SOX compliance, or IT risk management.
• Strong working knowledge of SOX IT General Controls (ITGCs) and familiarity with IT Application Controls (ITACs).
• Experience in control testing, walkthroughs, evidence validation, and audit support.
• Experience working with Internal Audit and external audit teams in a structured audit environment.
• Familiarity with ERP and enterprise systems (e.g., Oracle, SAP, or similar).
• Experience with audit and GRC tools (e.g., AuditBoard or equivalent) preferred.
• Professional certifications such as CISA, CISM, CIA, or CPA are preferred.

Responsibilities

• Execute end-to-end SOX ITGC activities, including control walkthroughs, design validation, testing readiness, and evidence review across key domains (Access, Change Management, Operations, etc.).
• Perform hands‑on control testing support, ensuring evidence is complete, accurate, and aligned with audit expectations.
• Review and validate control execution and documentation, identifying gaps, inconsistencies, or deficiencies in control design and operation.
• Drive remediation efforts, working directly with control owners to close gaps, improve control effectiveness, and meet audit timelines.
• Support audit cycles (walkthroughs, interim, and year‑end testing) by coordinating evidence collection, responding to auditor queries, and ensuring timely delivery of artifacts.
• Identify process inefficiencies and control weaknesses and proactively recommend practical improvements to enhance SOX ITGC maturity.
• Assist in maintaining the SOX control repository (e.g., AuditBoard or similar), ensuring documentation is current, complete, and aligned to control owners.
• Support onboarding of new systems into SOX scope, including initial risk assessment, control mapping, and readiness validation.
• Collaborate with IT, Security, and business stakeholders to ensure clear understanding of control expectations and execution requirements.
• Provide guidance to control owners on evidence standards, testing expectations, and common audit gaps to avoid repeat findings.
• Support development of SOX metrics and reporting, highlighting control health, deficiencies, and remediation status.
• Operate effectively under tight timelines, managing multiple priorities and escalations during peak audit periods.

Skills

SOX ITGC knowledge

IT audit experience

Control testing

Audit support

ERP familiarity

Education

Bachelor's degree in accounting or IT

Tools

AuditBoard

Job description

Job Description

Job Title: Governance Risk and Compliance I Analyst III

Division: Governance, Risk & Compliance

Position Summary

We are seeking a Senior IT SOX Compliance Analyst with strong hands‑on experience in SOX IT General Controls (ITGC) testing and execution to support and strengthen our internal control environment across a global enterprise. This role is highly execution‑focused and requires an individual who can operate effectively in a fast‑paced, audit‑driven environment, working closely with IT control owners, Internal Audit, and cross‑functional stakeholders to ensure controls are properly designed, executed, evidenced, and remediated. The ideal candidate brings deep IT audit experience, strong attention to detail, and the ability to identify control gaps and drive practical improvements.

Key Responsibilities

• Execute end-to-end SOX ITGC activities, including control walkthroughs, design validation, testing readiness, and evidence review across key domains (Access, Change Management, Operations, etc.).
• Perform hands‑on control testing support, ensuring evidence is complete, accurate, and aligned with audit expectations.
• Review and validate control execution and documentation, identifying gaps, inconsistencies, or deficiencies in control design and operation.
• Drive remediation efforts, working directly with control owners to close gaps, improve control effectiveness, and meet audit timelines.
• Support audit cycles (walkthroughs, interim, and year‑end testing) by coordinating evidence collection, responding to auditor queries, and ensuring timely delivery of artifacts.
• Identify process inefficiencies and control weaknesses and proactively recommend practical improvements to enhance SOX ITGC maturity.
• Assist in maintaining the SOX control repository (e.g., AuditBoard or similar), ensuring documentation is current, complete, and aligned to control owners.
• Support onboarding of new systems into SOX scope, including initial risk assessment, control mapping, and readiness validation.
• Collaborate with IT, Security, and business stakeholders to ensure clear understanding of control expectations and execution requirements.
• Provide guidance to control owners on evidence standards, testing expectations, and common audit gaps to avoid repeat findings.
• Support development of SOX metrics and reporting, highlighting control health, deficiencies, and remediation status.
• Operate effectively under tight timelines, managing multiple priorities and escalations during peak audit periods.

Qualifications

• Bachelor's degree in accounting, MIS, Information Systems, or a related field.
• 5–8 years of hands‑on experience in IT audit, SOX compliance, or IT risk management.
• Strong working knowledge of SOX IT General Controls (ITGCs) and familiarity with IT Application Controls (ITACs).
• Proven experience in control testing, walkthroughs, evidence validation, and audit support.
• Experience working with Internal Audit and external audit teams in a structured audit environment.
• Familiarity with ERP and enterprise systems (e.g., Oracle, SAP, or similar).
• Experience with audit and GRC tools (e.g., AuditBoard or equivalent) preferred.
• Professional certifications such as CISA, CISM, CIA, or CPA are preferred.