SOX IT Compliance Analyst

TheCorporate LLC; Oakland (CA); Hybrid; USD 110.000 - 150.000; Vollzeit

Benefits dieser Stelle

Laptop provided

Zusammenfassung

TheCorporate LLC in Oakland is seeking a Senior SOX IT Compliance Analyst to guide IT controls testing, remediation planning, and auditor coordination in a hybrid role. You will lead control walkthroughs, assess deficiencies, and communicate issues to business and system owners, with laptop equipment provided.

Ideal candidates hold a CISA/CIA/CISSP/CPA or equivalent, with 5+ years in SOX IT compliance, and a strong COSO/COBIT background and Big 4 exposure preferred.

Qualifikationen

• Experience in identifying, documenting, testing and remediating key SOX IT controls.
• Strong understanding of ITGCs, COSO, COBIT, AS5 and control impact on processes.
• Ability to evaluate deficiencies and influence system owners on solutions.

Aufgaben

• Provides guidance to Technology and Security Compliance on SOX IT controls.
• Evaluates testing objectives and plans for ITGCs.
• Performs walkthroughs of complex processes and identifies gaps.
• Coordinates with external auditors for SOX audits.
• Monitors progress of open SOX deficiencies and remediation efforts.
• Assists with quarterly leadership and Audit Committee deliverables.
• Trains process owners on internal control compliance.

Kenntnisse

SOX IT / ITGC expertise

SOX/ITGC controls knowledge

COSO COBIT AS5

IT systems knowledge

SOD / access control

Stakeholder communication

Ausbildung

Bachelor’s degree in MIS / CS / Accounting or equivalent

Master’s degree in MIS / CS or related field

Tools

WDesk SOX module

Jobbeschreibung

Job Title:

SOX IT Compliance Analyst, Senior

Location:

Oakland, CA

Duration:

November 2, 2026 — February 26, 2027

Notes:

The role is hybrid with at least once a week onsite expectation.

TOP THINGS:

• Strong SOX IT / ITGC technical expertise and judgment
• Deep understanding of SOX, ITGCs, application/OS/database controls, access and segregation of duties, COSO, COBIT, and AS5.
• Can determine whether a control is properly designed, identify gaps.
• Ability to independently evaluate complex processes and controls
• Can lead walkthroughs, ask probing questions, understand how systems and business processes connect, identify control gaps, and recommend appropriate controls with limited guidance.
• Someone who can go beyond confirming that evidence exists to assess whether the control effectively addresses the underlying risk and whether testing is sufficiently thorough, clear, and well-documented to support the conclusion.
• Strong stakeholder communication and influence
• Can explain SOX/control issues clearly to system owners, business process owners, leadership, and external auditors.
• Can challenge appropriately, provide practical control advice, coordinate remediation, and turn technical findings into clear, actionable business language.
• EQUIPMENT: Client laptop will be provided.

Job Description:

JOB RESPONSIBILITIES:

• Provides guidance and act as a subject matter expert to Technology and Security Compliance personnel, system owners, and business process owners within and outside of IT organization on the identification, documentation, testing, and remediation of key controls for SOX IT processes.
• Evaluates, develops, and establishes appropriate testing objectives and test plans for the in-scope ITGCs (IT General Controls).
• Performs walkthroughs of medium to complex system processes and identifies gaps in controls.
• Assists in coordinating SOX audit performed by external auditors.
• Coordinates with system owners to monitor the progress of open SOX control deficiencies and remediation efforts.
• Evaluates ITGCs’ deficiencies in accordance with the company’s framework for evaluating control deficiencies and identifies associated financial statements impact.
• Performs and documents IT entity level controls testing.
• Performs quality assurance reviews on completed SOX IT testing documentation.
• Assists with the preparation of quarterly deliverables for Leaderships and Audit Committee.
• Trains new or existing process owners on the internal control compliance processes.
• Manages WDesk SOX module to facilitate with the quarterly SOX testing and deliverables.

EDUCATION MINIMUM

• Bachelor’s degree in Management Information System, Computer Science, Accounting/Business, or equivalent experience.

EDUCATION DESIRED (max 3)

• Master’s Degree in Management Information System, Computer Science, or job-related discipline or equivalent experience

EXPERIENCE MINIMUM (max 5):

• 5 years of relevant experience in SOX IT Compliance or other applicable areas, including public accounting experience.

EXPERIENCE DESIRED (max 5):

1. Previous experience in Big 4 Public Accounting or in the energy or public utility industry.
2. Experience with internal/external audits.

LICENSE / CERTIFICATION MINIMUM:

Certified Information Systems Auditor (CISA)

LICENSE / CERTIFICATION REQUIRED (max 5):

• Certified Internal Auditor (CIA)
• Certified Information Systems Security Professional (CISSP)
• Certified Public Accountant (CPA) or equivalent

KNOWLEDGE, SKILLS, ABILITIES, AND (TECHNICAL) COMPETENCIES

• Solid understanding of AS5, COBIT framework, and COSO framework.
• Demonstrates knowledge of: (1) IT systems (applications, operating systems, databases, and middleware), (2) ITGCs, (3) control impact on most IT and business processes, and (4) SOD conflicts with IT access.
• Ability to assess potential impact of deficiencies, provide control advice for moderate to complex processes, and to positively influence system owners on control solutions.
• Ability to prioritize, perform, and communicate necessary SOX activities and communicate SOX findings both in written and verbal form that is cohesive, understandable, and actionable to stakeholders.
• Robust understanding of the SOX regulation, the Utility’s standards and procedures, and industry best practices to provide control advice to stakeholders.
• Ability to ask detailed, probing questions, and to utilize research and issue resolution skills.
• Ability to effectively manage multiple diverse tasks and adhere to tight deadlines.
• Ability to initiate system reviews/walkthroughs, identify gaps and recommend appropriate controls with limited guidance.