SOX & Data Security GRC Analyst

Hayward Industries; Clemmons (NC); On-site; USD 75,000 - 105,000; Full time

Job summary

Hayward Holdings Inc. seeks a GRC Analyst – SOX & Data Security Focus to safeguard ICFR and sensitive financial data. You will administer Varonis, monitor access, and coordinate with internal and external auditors to ensure SOX controls and data protections are effective.

Responsibilities include ITGC design/operation, access reviews, and supporting Sailpoint improvements, with collaboration across Finance and IT teams in a global risk framework.

Qualifications

• 3–6 years of SOX-focused GRC or audit experience.
• Hands-on experience managing Varonis in SOX environments.
• Strong understanding of ITGCs, ICFR, and audit evidence standards.
• Bachelor’s degree in Accounting, Information Systems, Cybersecurity, or related field.

Responsibilities

• SOX Compliance & Internal Controls: design, documentation, and operation of IT General Controls (ITGCs).
• Execute and evidence SOX controls related to logical access and data integrity.
• Perform control testing, track deficiencies, and manage remediation.
• Serve as liaison with Internal Audit and external auditors.
• Administer Varonis to classify and protect critical data and produce audit-ready reports.
• Perform SOX user access reviews for financial systems; support Sailpoint enhancements.

Skills

SOX compliance

ITGCs

ICFR

Varonis

Sailpoint

data security

access reviews

audit liaison

documentation

risk management

Education

Bachelor’s degree in Accounting/Information Systems/Cybersecurity

Tools

Varonis

Sailpoint

Job description

Hayward Holdings Inc. seeks a GRC Analyst – SOX & Data Security Focus to safeguard ICFR and sensitive financial data. You will administer Varonis, monitor access, and coordinate with internal and external auditors to ensure SOX controls and data protections are effective.

Responsibilities include ITGC design/operation, access reviews, and supporting Sailpoint improvements, with collaboration across Finance and IT teams in a global risk framework.