SOX IT Compliance Analyst: ITGC & SAP Focus

Ultra Clean Technology; Lapu-Lapu; On-site; PHP 600,000 - 860,000; Full time

Job summary

Ultra Clean Technology is seeking an IT Infosec Analyst II focused on SOX compliance and ITGC testing in Cebu, Philippines. The role collaborates with IT, Internal Audit, and external auditors to strengthen IT controls over financial reporting.

The ideal candidate will have experience with ERP environments such as SAP, and familiarity with security frameworks. Strong analytical and communication skills are essential.

Qualifications

• Bachelor's degree in accounting or business-related field or equivalent experience.
• Bachelor's degree in information security, computer science, or related field.
• Industry risk certification a strong plus (CPA, CISA, CRISC, or CISM).

Responsibilities

• Lead SOX ITGC and application control testing; assess design and operating effectiveness.
• Conduct control evaluations, compliance reviews and risk assessments.
• Perform control design analysis and recommend improvements.
• Coordinate walkthroughs with internal and external auditors.
• Manage remediation plans and ensure timely closure.
• Develop and maintain IT compliance policies and procedures.
• Provide guidance to junior analysts and embed requirements into system design.
• Collaborate with IT, finance, SAP security, and auditors to maintain controls.

Skills

IT Security

SOX

ITGC

Audit

Risk Management

Communication

Documentation

Cloud Security

Education

Bachelor's degree in Accounting or business related field

Bachelor's degree in Information Security or CS

Tools

OPTRO/AuditBoard

OneTrust

Workiva

SAP GRC

Pathlock

OpenPages

Power BI

Job description

Ultra Clean Technology is seeking an IT Infosec Analyst II focused on SOX compliance and ITGC testing in Cebu, Philippines. The role collaborates with IT, Internal Audit, and external auditors to strengthen IT controls over financial reporting.

The ideal candidate will have experience with ERP environments such as SAP, and familiarity with security frameworks. Strong analytical and communication skills are essential.