IT SOX & ITGC Controls Analyst (SAP/GRC)

Incyte; Chadds Ford Township (PA); On-site; USD 75,000 - 105,000; Full time

Job summary

Incyte is seeking an IT Internal Controls Analyst to support ITSOX, ITGCs, and access governance across enterprise systems. You will collaborate with IT, IT Application Security, and Audit teams to ensure SOX compliance and audit readiness in a regulated environment.

The ideal candidate has hands-on SOX/audit experience, ERP/GRC exposure (SAP preferred), strong documentation, and the ability to work with US and EU stakeholders. This role offers growth in audit program maturity.

Qualifications

• Bachelor’s degree in IT, CS, IS, or related field.
• 1–3 years hands-on IT SOX/ITGCs or technology risk/compliance.
• Strong knowledge of user access controls, identity lifecycle, and duties segregation.
• Experience with SDLC controls and pre/post implementation reviews.
• ERP experience (SAP preferred) with access or change controls.
• GRC platforms such as AuditBoard, SAP GRC, or ServiceNow GRC.
• Experience interfacing with external auditors and supporting audit requests.
• Strong documentation, organization, and written communication.
• Able to work independently with US and EU stakeholders.

Responsibilities

• Support IT SOX and ITGC audits, including evidence coordination and remediation tracking.
• Execute periodic user access reviews with AD checks and segregation of duties.
• Support SAP Change Management and SAP GRC activities, including transport reviews.
• Support SDLC controls for IT project implementations and post-implementation audits.
• Support third party and SaaS audit requests, SOC report coordination, and control validation.
• Administer GRC tool access for internal teams and auditors.
• Maintain audit-ready ITGC documentation and evidence artifacts.
• Identify opportunities for automation to improve audit efficiency.
• Contribute to audit status, remediation, and project reporting.

Skills

IT SOX

ITGCs

User access controls

Identity lifecycle

Segregation of duties

SDLC controls

ERP (SAP)

GRC platforms

Auditor coordination

Documentation

Stakeholder collaboration

Education

Bachelor’s degree in information technology, computer science, information systems, or a related field

Tools

AuditBoard

SAP GRC

ServiceNow GRC

Job description

Incyte is seeking an IT Internal Controls Analyst to support ITSOX, ITGCs, and access governance across enterprise systems. You will collaborate with IT, IT Application Security, and Audit teams to ensure SOX compliance and audit readiness in a regulated environment.

The ideal candidate has hands-on SOX/audit experience, ERP/GRC exposure (SAP preferred), strong documentation, and the ability to work with US and EU stakeholders. This role offers growth in audit program maturity.