IT SOX Consultant

Trident Consulting; Los Angeles (CA); On-site; USD 140,000 - 155,000; Full time

Job summary

Trident Consulting is seeking an IT SOX / Internal Controls Business Analyst for a contract opportunity in Rosemead, CA. The role focuses on IT SOX, governance, risk management, control documentation, and testing across portfolios.

The ideal candidate will lead control design reviews, create RACMs and narratives, and coordinate with Internal Audit, SOX governance, IT, and business leaders to deliver strong, audit-ready controls in a fast-paced environment.

Qualifications

• 7+ years of experience implementing or managing internal control policies, processes and systems.
• Strong experience with SOX/IT SOX, ITGCs, risk management and audit coordination.
• Experience developing RACMs and control narratives and testing controls.
• Excellent stakeholder management and communication skills; able to work with executives.

Responsibilities

• Lead and manage assigned IT SOX and internal control portfolios.
• Act as a business analyst, SOX analyst, assessor, and project lead for assigned initiatives.
• Lead IT SOX control deficiency reviews, remediation activities, and issue tracking.
• Develop and maintain RACMs and control narratives.
• Assess control design and operating effectiveness.
• Support IT General Controls (ITGCs): access, change management, SDLC controls.
• Identify automation opportunities and enhance control documentation and evidence.

Skills

IT SOX

ITGCs

Risk management

Audit coordination

Business analysis

Control testing

Control design

Stakeholder management

Documentation

Project management

Education

Bachelor's degree in Business, Accounting, Finance, IS/IT, Engineering, or related field

Tools

RACMs & control narratives

Job description

Trident Consulting is seeking a \"IT SOX / Internal Controls Business Analyst\" for one of our client in Rosemead, CA.

Job Title: IT SOX / Internal Controls Business Analyst

Type: Contract - W2

Pay Rate: $70/hr on W2

Duration: Up to 18 Months

Schedule: Monday–Friday, 8:00 AM–5:00 PM

Position Overview

We are seeking a highly skilled IT SOX / Internal Controls Business Analyst to support IT SOX, business controls, quality management, risk management, and control documentation activities.

The consultant will partner with business teams, IT, SOX Governance, Internal Audit, External Auditors, and senior leadership to develop, assess, document, test, and remediate internal controls across assigned portfolios.

The ideal candidate will have strong experience with SOX, ITGCs, internal controls, risk management, audit coordination, business analysis, control documentation, and control testing, along with the ability to work independently in an ambiguous and fast-paced environment.

Key Responsibilities

• Lead and manage assigned IT SOX and internal control portfolios.
• Act as a business analyst, SOX analyst, assessor, and project lead for assigned initiatives.
• Lead IT SOX control deficiency reviews, remediation activities, and issue tracking.
• Develop and maintain Risk and Control Matrices (RACMs) and control narratives.
• Assess control design and operating effectiveness.
• Support IT General Controls (ITGCs), including: Access controls, Change management, SDLC controls
• Automated/configurable controls, Reporting and IPE, Interface controls, Control evidence
• Support SOX scoping assessments, scoping memos, and control assessments.
• Evaluate IT projects and SDLC processes for appropriate control design.
• Partner with Internal Audit, External Audit, SOX Governance, IT, business stakeholders, and leadership.
• Conduct stakeholder interviews and requirements gathering.
• Perform current-state/future-state process mapping and gap analysis.
• Translate control requirements into process and documentation requirements.
• Identify opportunities to automate, simplify, standardize, and improve controls while maintaining audit defensibility.
• Develop remediation plans and track corrective actions.
• Prepare executive-level status reports, governance materials, and presentations.
• Maintain issue logs, decision logs, control documentation, and audit support materials.
• Use AI and digital productivity tools to improve analysis, documentation, reporting, and control execution.
• Provide recommendations for improving internal controls, processes, and compliance activities.

Required Qualifications

• 7+ years of experience implementing or managing internal control policies, processes, controls, and system improvements.
• Strong experience with:
• SOX / IT SOX, Internal controls, ITGCs, Risk management, Regulatory and operational controls, Audit coordination, Business analysis, Control testing, Control design and operating effectiveness
• Strong understanding of ITGC domains, including access, change management, SDLC, automated/configurable controls, reporting, interfaces, and control deficiencies.
• Experience developing and managing RACMs and control narratives.
• Experience supporting control testing, evidence collection, remediation, and audit activities.
• Ability to analyze complex business and technical processes and identify control gaps.
• Strong stakeholder management and communication skills.
• Ability to communicate effectively with frontline teams through executive leadership.
• Strong critical thinking, judgment, problem-solving, and analytical skills.
• Comfortable working independently and dealing with ambiguity.
• Ability to challenge existing processes and control designs constructively.
• Strong documentation and project management skills.
• Bachelor's degree in Business, Accounting, Finance, Information Systems, Technology, Engineering, or related field preferred.
• Equivalent combination of education and experience may be considered.

Preferred Qualifications

• Experience with large-scale software implementations.
• Experience working in enterprise business process control environments.
• Utility / energy industry experience.
• Professional certifications such as: CIA, CISA, CRISC
• Or equivalent audit, risk, controls, quality, or project-management certifications.
• Experience working directly with internal and external auditors.
• Experience identifying opportunities to automate and simplify SOX controls.
• Experience reducing manual control effort and improving audit evidence quality.
• Experience using AI-enabled and digital productivity tools to modernize control documentation, analysis, reporting, and execution.

About Trident Consulting

Trident Consulting is an award-winning staffing and consulting firm headquartered in San Ramon, CA. Since 2005, we’ve partnered with Fortune 500 and high-growth companies to deliver high-quality talent across technology, engineering, business operations, and professional services.

We specialize in contract, contract-to-hire, and direct hire placements, supporting roles across IT, data & analytics, cloud, cybersecurity, finance & accounting, HR, operations, and more. With a strong focus on hard-to-fill and niche positions, our global recruiting engine enables us to deliver speed, quality, and scale.