Senior IT SOX & Controls Analyst

APR Consulting, Inc; Rosemead (CA); Hybrid; USD 140,000 - 150,000; Full time

Job summary

APR Consulting, Inc. seeks a Senior IT SOX & Controls Analyst in Rosemead, CA (Hybrid: Onsite Tu & Wed). The role combines business analysis with IT SOX expertise to support controls, governance, and documentation efforts.

You will lead IT SOX deficiency reviews, RACM management, and control narratives across portfolios. Ideal candidates bring 7+ years in internal controls, strong ITGC knowledge, and the ability to work with IT, audit, and leadership.

Qualifications

• 7+ years of experience in internal controls, IT SOX, and risk management.
• Experience leading control documentation, RACMs, and narratives.
• Strong communication with executives and frontline teams.

Responsibilities

• Act as business analyst and SOX analyst supporting IT SOX, controls, quality management, and control documentation.
• Partner with business, IT, internal audit, and external auditors to develop, assess, document, test, and remediate controls across portfolios.
• Lead control deficiency reviews for IT SOX controls and manage RACMs and narratives.
• Perform stakeholder interviews, requirements gathering, process mapping, gap analysis, and translate control needs into documentation.
• Evaluate current controls for design, operating effectiveness, automation, simplification, and standardization.

Skills

IT SOX

RACM

Control documentation

Business analysis

Cross-functional collaboration

Education

Bachelor's degree preferred

Tools

SharePoint

Teams

PowerPoint

Microsoft 365

Job description

An electric utility client is looking for a Senior IT SOX & Controls Analyst who will act as both a business analyst and SOX analyst supporting IT SOX, business controls, quality management, and control documentation activities.

Position: Senior IT SOX & Controls Analyst
Location: Rosemead, CA 91770 – Hybrid: Onsite Tu & W
Pay Rate: $69.70/hr. on W2
Duration: 18 months or longer
Schedule: 1stshift, M-F, 8:00 AM to 5:00 PM

Looking for a highly skilled internal controls professional who can operate independently, deal with ambiguity, and move work forward without needing step-by-step direction. The person should be resourceful, proactive, and comfortable working across business, IT, SOX Governance, internal audit, external auditors, and senior leadership. This role will support assigned portfolios, lead IT SOX deficiency reviews, manage RACM and control narrative documentation, and evaluate existing SOX, operational, and compliance controls for control design, operating effectiveness, automation, simplification, and standardization opportunities. Candidate must bring strong critical thinking, a learning mindset, and confidence using AI and digital tools to modernize analysis, documentation, reporting, and control execution while maintaining audit defensibility.

RESPONSIBILITIES

• Contingent worker will act as both a business analyst and SOX analyst supporting IT SOX, business controls, quality management, and control documentation activities.
• The role will partner with business, IT, internal audit, SOX Governance, external auditors, and leadership to develop, assess, document, test, and remediate internal controls across assigned portfolios, including control design and operating effectiveness. This includes ITGCs, automated/configurable controls, access controls, change management, SDLC controls, reports/IPE, interface controls, deficiency management, and control evidence. The role will also evaluate existing SOX, operational and compliance controls to identify opportunities for automation, simplification, standardization, and improved control efficiency while maintaining audit defensibility.
• Serve as overall lead / project manager / assessor for assigned portfolios; lead control deficiency review for IT SOX controls; lead document management for risk, audit and control matrices (RACMs), and control narratives; support scoping assessments, IT project SDLC control assessment and design, robotic process automation design reviews, scoping memos, remediation plans, governance reporting, and executive-ready status updates.
• Perform business analysis activities, including stakeholder interviews, requirements gathering, current-state and future-state process mapping, gap analysis, action tracking, and translating control needs into process or documentation requirements.
• Evaluate current SOX, operational and compliance controls and related processes for control design, operating effectiveness, automation, simplification, standardization, and documentation improvement opportunities without weakening control effectiveness or audit readiness.

QUALIFICATIONS:

• Bachelor’s degree preferred in business, accounting, finance, information systems, technology, engineering, or a related field; equivalent experience may be considered.
• Minimum Years of Experience: 7+ years.
• 7+ years of experience implementing internal control policies, processes, controls, and system improvements; strong SOX, regulatory, operational controls, risk management, audit coordination, and business analysis experience; ability to lead cross-functional teams, assess complex problems, develop control documentation, manage RACM and narratives, support control testing, evaluate control design and operating effectiveness, synthesize data/process flows, and communicate clearly with frontline teams through executive leadership.
• Must have strong knowledge of ITGCs and control domains including access, change management, SDLC, automated/configurable controls, reporting, interfaces, control deficiency management, and control evidence. Must demonstrate strong critical thinking, sound judgment, learning mindset, resourcefulness, and the ability to deal with ambiguity and challenge existing control designs and processes constructively.
• Must be comfortable using AI and digital tools to modernize work, improve analysis, streamline documentation, and increase efficiency.

PREFERRED QUALIFICATIONS:

• Experience supporting Safety Management System, quality assurance/quality control, audit, compliance, risk management, or operational excellence activities.
• Ability to interpret data beyond surface-level tracking and identify patterns, gaps, inconsistencies, and potential follow-up needs.
• Strong intuition for connecting related concepts across multiple Operating Units, safety programs, and workstreams.
• Ability to manage multiple data points, owners, due dates, status updates, and competing priorities with accuracy and follow-through.
• Familiarity with QA/QC practices such as conformance checks, data validation, documentation review, corrective action tracking, trend analysis, and audit readiness.
• Comfortable working with incomplete or evolving information and asking the right clarifying questions to move work forward.
• Strong Excel skills, including filtering, sorting, conditional formatting, formulas, pivot tables, and basic trend summaries.
• Experience using SharePoint, Teams, PowerPoint, Outlook, and other Microsoft 365 tools to organize information and communicate status.
• Experience working across multiple business units, Operating Units, or cross-functional teams is preferred.

About our client:
Our client is one of the largest electric utilities and a longtime leader in renewable energy and energy efficiency in the United States providing electricity for much of Southern California.

About APR:
Since 1980 APR Consulting, Inc. has provided professional recruiting and contingent workforce solutions to a diverse mix of clients, industries, and skill sets nationwide.

Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

We are an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by law.

#SLA