Information Technology Business Analyst

Insight Global; Saint Paul (MN); Hybrid; USD 41,328 - 48,216; Full time

Job summary

Insight Global is seeking a GRC Security Analyst in Saint Paul, MN, to support collaboration efforts with the Governance, Risk and Compliance team. This role involves managing NIST and SOX-related activities, acting as a liaison between teams, and ensuring timely tracking, reporting, and resolution of audit findings. Candidates should possess strong skills in audit frameworks, communication, and project management. Hybrid work is offered, requiring 2-3 days onsite each week.

Qualifications

• Strong understanding of Controls and Audit Frameworks; experience with standard Audit Methodologies.
• Attention to detail and strong documentation skills.
• Strong communication and project driver skills.

Responsibilities

• Act as the primary point of contact between the Security GRC team and Internal Audit.
• Track and monitor audit findings related to cybersecurity, IT risk, and SOX controls.
• Manage the end-to-end SOX testing lifecycle for ITGCs and application controls.

Skills

Controls and Audit Frameworks

Documentation skills

Communication

Project management

Job description

Location: Saint Paul, MN (Hybrid, 2-3 Days Onsite)

Employment: 7 Month Contract-To-Hire

Pay Range: $30-$35/Hourly

Required Skills & Experience

• Strong understanding of Controls and Audit Frameworks; experience with standard Audit Methodologies
• Attention to detail and strong documentation skills
• Strong communication and project driver as there is extensive collaboration with teams across Enterprise IT.

Nice to Have Skills & Experience

• Experience with SOX Compliance controls
• Experience with NIST audits and compliance
• Experience with GRC Controls processes

Job Description

A customer is seeking a GRC Security Analyst to support collaboration efforts with the Governance, Risk and Compliance team and Internal Audit groups managing NIST and SOX related activities. This role will serve as a Liaison to ensure timely tracking, reporting and resolution of audit findings, assist in drafting and managing Management Action Plans (MAPs), and coordinate SOX/NIST testing and escalations with control owners.

• Act as the primary point of contact between the Security GRC team and Internal Audit.
• Track and monitor audit findings related to cybersecurity, IT risk, and SOX controls.
• Draft, review, and manage Management Action Plans (MAPs) in response to audit findings.
• Coordinate with control owners and stakeholders to gather evidence and updates.

SOX Testing Coordination

• Manage the end-to-end SOX testing lifecycle for ITGCs and application controls.
• Coordinate with control owners to ensure timely completion of testing activities.
• Monitor testing progress, elevate delays or issues, and support remediation of failed controls.
• Liaise with internal and external auditors to facilitate walkthroughs, evidence collection, and issue resolution.

Stakeholder Coordination & Evidence Management

• Facilitate communication between Internal Audit, control owners, and GRC leadership to ensure alignment on audit findings, SOX testing, and remediation expectations.
• Coordinate meetings, follow-ups, and status updates to drive timely resolution of open items.
• Assist control owners in understanding audit and SOX requirements and expectations.
• Ensure all documentation and evidence related to findings or MAPs are complete, consistent, and audit-ready.

Metrics & Reporting

• Develop and maintain dashboards and KPIs to communicate status and progress of audit remediation and SOX testing.
• Provide regular updates to leadership on audit status and SOX compliance posture.