Schedule: Full-time contract — up to 18 months
Assignment: May be extended or converted to permanent depending on business needs
Education: Bachelor’s degree preferred; equivalent relevant experience may be considered
Pay Range: $64.00 - $71.00
Sponsorship is NOT available for this role
Position Summary
We are seeking an experienced Senior IT SOX & Internal Controls Analyst to serve as both a Business Analyst and SOX Analyst supporting IT SOX, internal controls, risk, audit, quality management, and control documentation activities.
This role will independently lead assigned portfolios and partner with Business, IT, SOX Governance, Internal Audit, external auditors, and senior leadership. The ideal candidate brings 7+ years of experience with SOX controls, ITGCs, control design and operating effectiveness, RACMs, control testing, deficiency management, and business analysis, along with the ability to identify opportunities for automation and process improvement without weakening audit defensibility.
What This Person Will Be Working On
- Lead IT SOX and internal control activities across assigned portfolios
- Assess control design and operating effectiveness and support control testing
- Lead IT SOX control deficiency reviews, remediation planning, and issue tracking
- Develop and maintain Risk and Control Matrices (RACMs), control narratives, evidence, and audit documentation
- Evaluate ITGCs, access controls, change management, SDLC controls, automated/configurable controls, reports/IPE, and interface controls
- Support SOX scoping assessments, scoping memos, SDLC control assessments, and RPA design reviews
- Partner with Internal Audit, external auditors, SOX Governance, IT, business teams, and leadership
- Perform stakeholder interviews, requirements gathering, process mapping, gap analysis, and action tracking
- Evaluate controls for automation, simplification, standardization, and improved efficiency
- Use AI and digital tools to modernize analysis, reporting, documentation, and control execution
- Develop remediation plans, governance reporting, status reports, and executive-ready presentations
- Maintain strong control effectiveness and audit readiness while improving existing processes
Required Skills & Experience
- 7+ years of experience implementing internal control policies, processes, controls, and system improvements
- Strong SOX / IT SOX experience
- Strong knowledge of IT General Controls (ITGCs)
- Experience with access controls, change management controls, and SDLC controls
- Experience with automated/configurable controls, reports/IPE, and interface controls
- Strong understanding of control design and operating effectiveness
- Experience with control testing, evidence collection, and audit support
- Experience managing RACMs and control narratives
- Experience leading control deficiency reviews and remediation activities
- Strong risk management, regulatory controls, operational controls, and audit coordination experience
- Business Analysis experience including requirements gathering, stakeholder interviews, process mapping, and gap analysis
- Ability to analyze complex data and process flows and translate findings into control/process requirements
- Experience leading cross-functional teams and assigned portfolios
- Strong communication skills across frontline teams, auditors, and executive leadership
- Ability to independently manage complex work and operate effectively with ambiguity
- Strong critical thinking, judgment, problem-solving, and resourcefulness
- Comfortable using AI and digital productivity tools to improve analysis, documentation, reporting, and efficiency
Desired Skills
- Experience with large-scale software implementations or enterprise business-process control environments
- Utility industry experience
- Experience working directly with internal and external auditors
- Experience creating SOX status reports, governance materials, deficiency memos, remediation plans, and scoping memos
- Experience creating process flows, testing support documentation, issue logs, decision logs, and control narratives
- Experience identifying opportunities to automate or simplify SOX controls
- Experience reducing manual control activities and improving evidence quality
- Experience modernizing controls and documentation using AI-enabled tools
- Experience reviewing Robotic Process Automation (RPA) designs from a controls perspective
- CIA, CISA, CRISC, or equivalent certification/training
- Quality management, risk, controls, audit, or project-delivery training/certification
- Bachelor’s degree in Business, Accounting, Finance, Information Systems, Technology, Engineering, or related field