GRC Analyst – J-SOX & ITGC - C2H

Yamaha Motor Solutions India Pvt. Ltd.; San Antonio (TX); Sur place; USD 70 000 - 110 000; Plein temps

Résumé du poste

Yamaha Motor Solutions India Pvt. Ltd. seeks an analytically driven GRC Analyst with 2–5 years of IT Audit and GRC experience, focusing on J-SOX and ITGC across financial systems. You will bridge regulatory expectations with IT governance and work across core financial processes.

The role requires knowledge of SOX/J-SOX, COSO, COBIT, GLBA and GDPR, with collaboration across risk, compliance, IT, and business teams to improve control environments.

Qualifications

• 2 to 5 years of IT Audit or GRC experience in regulated industries.
• Practical knowledge of J-SOX, COSO, COBIT, GLBA and GDPR.
• Experience in Banking, FinTech, Manufacturing preferred.
• Coordinate audits and remediation with cross-functional teams.
• CISA/CRISC/CISM certifications are a plus.

Responsabilités

• Lead J-SOX testing, documentation, and operational analysis of financial processes.
• Evaluate IT General Controls across critical banking and financial IT systems.
• Ensure data governance, data integrity, and SOX-aligned controls.
• Coordinate with external auditors and internal stakeholders.
• Document test evidence and remediation efforts.

Connaissances

GRC

IT Audit

Risk Assessment

SOX/J-SOX

Formation

CISA

CRISC

CISM

ISO/IEC 27001 Lead Auditor/Lead Implementer

Description du poste

We are seeking an analytically drivenGRC Analystwith2 to 5 years of experiencein experience in IT Audit, Internal Audit, Risk Management, SOX / J-SOX, or GRC functions. Experience within Banking, Financial Services, FinTech, Manufacturing, Automotive, or other regulated industries preferred. In this role, the candidate will bridge financial regulations and corporate IT governance by evaluating controls underJ-SOX requirements. The primary focus will be validating internal controls and assessingInformation Technology General Controls (ITGC)across systems executing core financial transactions. This position requires a strong understanding of banking or finance workflows and the regulatory expectations governing financial data processing.

Department

Cyber security

Open Positions

1

Skills Required

GRC,

Role

• Financial Sector J-SOX Compliance: Lead J-SOX testing, documentation, and operational analysis of financial business processes and technical workflows.
• High-Risk ITGC Auditing: Evaluate IT General Controls across critical banking and financial IT infrastructures, including stringent user access management (segregation of duties), strict change management procedures, and rigorous disaster recovery configurations.
• Financial Data Governance: Verify controls over data integrity, financial reporting accuracy, and secure processing structures, ensuring alignment withSOX / J-SOX, COSO, COBIT, GLBA, GDPR, and applicable local banking data mandates.
• Audit Lifecycle and Stakeholder Coordination: Facilitate walkthroughs, maintain Risk & Control Matrices, coordinate with system owners, process owners, HR, infrastructure teams, and third-party vendors, and track control gaps and remediation activities.
• TOD / TOE Testing and Workpaper Documentation: Perform Design Effectiveness and Operating Effectiveness testing of ITGCs and business process controls, including evidence testing, validation of control attributes, control performance evaluation, workpaper preparation, and J-SOX-aligned documentation of test results.
• External Audit Integration: Act as an operational interface for external oversight teams, regulatory bodies, and global auditors during formal internal and external testing cycles.

Required Qualifications & Experience

• Experience: 2 to 5 years of experience directly executing IT Audit, Internal Audit, J-SOX or GRC workflows within a Bank, Fintech, or insurance institution.
• Framework Expertise: Practical knowledge of J-SOX regulations, COSO internal control frameworks, and COBIT standards for technical infrastructure management.
• Core Systems Exposure: Hands-on exposure auditing ERP, lending, financial reporting, core banking, or other business-critical applications supporting financial transaction processing.

Ideal Certifications

• CISA (Certified Information Systems Auditor)
• CRISC (Certified in Risk and Information Systems Control)
• CISM (Certified Information Security Manager)
• ISO/IEC 27001 Lead Auditor or Lead Implementer