IT Audit Analyst

Perfict; Boston (MA); On-site; USD 110,000 - 140,000; Full time

Job summary

Perfict is seeking an IT Compliance professional in Boston to lead SOX IT control testing, maintain control narratives, and support audit readiness across the organization. You will collaborate with IT and business teams to ensure ITGCs, access, change, and SDLC controls are robust and well-documented.

Responsibilities include reviewing SOC 1/2 reports, facilitating internal and external audits, and driving process improvements through automation and effective reporting.

Qualifications

• Strong experience in IT Compliance, IT Audit, SOX, IT Risk, ITGC, or GRC.
• Hands-on experience with SOX IT control testing and remediation.
• Strong understanding of IT General Controls (ITGC) including Access Management, Change Management, SDLC Controls, User Access Reviews, Privileged Access Controls, IT Operations Controls.
• Experience reviewing SOC 1/SOC 2 reports and assessing third-party/vendor controls.
• Experience supporting internal and external audits, including evidence collection and remediation tracking.
• Strong documentation, analytical, organizational, and stakeholder management skills.
• Excellent communication skills across IT, business, audit, and compliance teams.

Responsibilities

• Maintain and update IT compliance documentation, policies, procedures, control narratives, and CMDB-related information.
• Execute and document SOX IT control testing, identify control deficiencies, track findings, and support remediation activities.
• Manage periodic user access reviews, including provisioning, deprovisioning, role-based access, and privileged access controls.
• Monitor and support IT change management controls, ensuring appropriate approvals, testing, implementation, and documentation.
• Ensure SDLC and system implementation documentation is complete, accurate, and retained for audit purposes.
• Review SOC 1 and SOC 2 reports for critical third-party vendors and maintain appropriate vendor compliance records.
• Support internal and external audits by gathering evidence, responding to audit requests, coordinating with stakeholders, and resolving exceptions.
• Identify opportunities to improve compliance processes, controls, and reporting through automation and workflow optimization.
• Utilize tools such as Microsoft Power Automate to streamline compliance processes and reduce manual activities.
• Partner with IT and business teams on system implementations, upgrades, process changes, and related compliance requirements.
• Maintain accurate compliance records and ensure controls remain aligned with organizational policies and regulatory requirements.

Skills

IT Compliance

SOX IT Control Testing

IT Audit

IT Risk

ITGC

GRC

Access Management

Change Management

SDLC Controls

User Access Reviews

Privileged Access Controls

IT Operations Controls

Documentation & Reporting

Stakeholder Management

Communication Skills

Tools

Microsoft Power Automate

Job description

• Maintain and update IT compliance documentation, policies, procedures, control narratives, and CMDB-related information.
• Execute and document SOX IT control testing, identify control deficiencies, track findings, and support remediation activities.
• Manage periodic user access reviews, including provisioning, deprovisioning, role-based access, and privileged access controls.
• Monitor and support IT change management controls, ensuring appropriate approvals, testing, implementation, and documentation.
• Ensure SDLC and system implementation documentation is complete, accurate, and retained for audit purposes.
• Review SOC 1 and SOC 2 reports for critical third-party vendors and maintain appropriate vendor compliance records.
• Support internal and external audits by gathering evidence, responding to audit requests, coordinating with stakeholders, and resolving exceptions.
• Identify opportunities to improve compliance processes, controls, and reporting through automation and workflow optimization.
• Utilize tools such as Microsoft Power Automate to streamline compliance processes and reduce manual activities.
• Partner with IT and business teams on system implementations, upgrades, process changes, and related compliance requirements.
• Maintain accurate compliance records and ensure controls remain aligned with organizational policies and regulatory requirements.

Required Qualifications

• Strong experience in IT Compliance, IT Audit, SOX, IT Risk, ITGC, or GRC.
• Hands-on experience with SOX IT control testing and remediation.
• Strong understanding of IT General Controls (ITGC), including:
• Access Management
• Change Management
• SDLC Controls
• User Access Reviews
• Privileged Access Controls
• IT Operations Controls
• Experience reviewing SOC 1/SOC 2 reports and assessing third-party/vendor controls.
• Experience supporting internal and external audits, including evidence collection and remediation tracking.
• Strong documentation, analytical, organizational, and stakeholder management skills.
• Excellent communication skills with the ability to work effectively across IT, business, audit, and compliance teams.