Senior IT SOX & Internal Controls Analyst - ITGC | Risk | Compliance

Rose International; Rosemead (CA); Hybrid; USD 83,000 - 94,000; Full time

Job summary

Rose International in Rosemead, CA, seeks a Senior IT SOX & Internal Controls Analyst to lead IT general controls, risk assessments, and control narratives across portfolios. The role partners with IT, internal audit, and external auditors to document, test, and remediate controls.

This contingent, temp-to-hire position offers hybrid on-site work (Tue & Wed onsite) with a $60.00–$68.50 hourly rate, and a focus on leveraging AI tools to modernize analysis and documentation.

Qualifications

• 7+ years of experience implementing internal control policies, processes, controls, and system improvements.
• Strong SOX, regulatory, operational controls, risk management, audit coordination, and business analysis experience.
• Ability to lead cross-functional teams, assess complex problems, develop control documentation, manage RACM and narratives, support control testing.

Responsibilities

• Lead IT SOX and internal control activities for assigned portfolios.
• Collaborate with IT, internal audit, SOX governance, and external auditors to design, test, and remediate controls.
• Evaluate ITGCs and control domains including access, change management, SDLC, and control evidence.
• Identify opportunities to automate or simplify SOX controls while maintaining audit readiness.

Skills

AI

Change Management

Implementation

Reporting

SDLC

SOX

Education

Bachelor’s Degree

CIA

CISA

CRISC

Job description

Date Posted: 09/18/2026

Hiring Organization: Rose International

Position Number: 507748

Industry: Utility

Job Title: Senior IT SOX & Internal Controls Analyst - ITGC | Risk | Compliance

Job Location: Rosemead, CA, USA, 91770

Work Model: Hybrid

Work Model Details: Onsite 2 days/week: Tue & Wed

Employment Type: Temp to Hire

FT/PT: Full-Time

Estimated Duration (In months): 20

Min Hourly Rate($): 60.00

Max Hourly Rate($): 68.50

Must Have Skills/Attributes: AI, Change Management, Implementation, Reporting, SDLC, SOX

Experience Desired: Experience implementing internal control policies, processes, controls, and system improvements (7+ yrs); Must have strong knowledge of ITGCs and control domains including access, change management (7+ yrs); Experience with large-scale software implementations and/or enterprise business process control (7+ yrs)

Required Minimum Education: Bachelor’s Degree

Preferred Certifications/Licenses: Certifications in audit such as CIA, CISA, CRISC

C2C is not available

Required Education

• Bachelor’s degree preferred in business, accounting, finance, information systems, technology, engineering, or a related field; equivalent experience may be considered

Preferred License/Certification

• Professional training or certifications in audit such as CIA, CISA, CRISC, or equivalent, quality management, controls, risk, or project delivery

Required Experience, Knowledge & Skills

• 7+ years of experience implementing internal control policies, processes, controls, and system improvements
• Strong SOX, regulatory, operational controls, risk management, audit coordination, and business analysis experience;
• Ability to lead cross-functional teams, assess complex problems, develop control documentation, manage RACM and narratives, support control testing, evaluate control design and operating effectiveness, synthesize data/process flows, and communicate clearly with frontline teams through executive leadership
• Must have strong knowledge of ITGCs and control domains including access, change management, SDLC, automated/configurable controls, reporting, interfaces, control deficiency management, and control evidence
• Must demonstrate strong critical thinking, sound judgment, learning mindset, resourcefulness, and the ability to deal with ambiguity and challenge existing control designs and processes constructively
• Must be comfortable using AI and digital tools to modernize work, improve analysis, streamline documentation, and increase efficiency

Preferred Experience, Knowledge & Skills

• Experience with large-scale software implementations and/or enterprise business process control environments
• Utility industry experience;
• Experience liaising with internal/external auditors and producing executive-level presentations, SOX status reports, governance materials, control deficiency memos, remediation plans, scoping memos, process flows, control design and operating effectiveness assessments, testing support documentation, issue logs, decision logs, and control narratives
• Experience identifying opportunities to automate or simplify SOX controls, reduce manual effort, improve evidence quality, and modernize control documentation using AI-enabled or digital productivity tools is strongly preferred

Job Responsibilities

• Contingent worker will act as both a business analyst and SOX analyst supporting IT SOX, business controls, quality management, and control documentation activities
• The role will partner with business, IT, internal audit, SOX Governance, external auditors, and leadership to develop, assess, document, test, and remediate internal controls across assigned portfolios, including control design and operating effectiveness
• This includes ITGCs, automated/configurable controls, access controls, change management, SDLC controls, reports/IPE, interface controls, deficiency management, and control evidence
• The role will also evaluate existing SOX, operational and compliance controls to identify opportunities for automation, simplification, standardization, and improved control efficiency while maintaining audit defensibility
• Serve as overall lead / project manager / assessor for assigned portfolios; lead control deficiency review for IT SOX controls; lead document management for risk, audit and control matrices (RACMs), and control narratives; support scoping assessments, IT project SDLC control assessment and design, robotic process automation design reviews, scoping memos, remediation plans, governance reporting, and executive-ready status updates
• Perform business analysis activities, including stakeholder interviews, requirements gathering, current-state and future-state process mapping, gap analysis, action tracking, and translating control needs into process or documentation requirements
• Evaluate current SOX, operational and compliance controls and related processes for control design, operating effectiveness, automation, simplification, standardization, and documentation improvement opportunities without weakening control effectiveness or audit readiness
• Looking for a highly skilled internal controls professional who can operate independently, deal with ambiguity, and move work forward without needing step-by-step direction
• The person should be resourceful, proactive, and comfortable working across business, IT, SOX Governance, internal audit, external auditors, and senior leadership
• This role will support assigned portfolios, lead IT SOX deficiency reviews, manage RACM and control narrative documentation, and evaluate existing SOX, operational, and compliance controls for control design, operating effectiveness, automation, simplification, and standardization opportunities
• Candidate must bring strong critical thinking, a learning mindset, and confidence using AI and digital tools to modernize analysis, documentation, reporting, and control execution while maintaining audit defensibility
• Only those lawfully authorized to work in the designated country associated with the position will be considered.
• Please note that all Position start dates and duration are estimates and may be reduced or lengthened based upon a client’s business needs and requirements.

Benefits

For information and details on employment benefits offered with this position, please visit here.

California Pay Equity

For information and details on pay equity laws in California, please visit the State of California Department of Industrial Relations' website here.

Equal Opportunity Employer

Rose International is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, sexual orientation, gender (expression or identity), national origin, arrest and conviction records, disability, veteran status or any other characteristic protected by law. Positions located in San Francisco and Los Angeles, California will be administered in accordance with their respective Fair Chance Ordinances.

Employment Verification

Rose International has an official agreement (ID #132522), effective June 30, 2008, with the U.S. Department of Homeland Security, U.S. Citizenship and Immigration Services, Employment Verification Program (E-Verify). (Posting required by OCGA 13/10-91.).