IT Controls & Compliance-Staff

IT Controls & Compliance-Staff

Requirements

• Associate’s or bachelor’s degree in Information Systems, Computer Science, or a related field
• CISA certification required; CRISC certification preferred
• 1+ years of experience in IT audit
• Strong understanding of IT audit methodologies
• Awareness of current cybersecurity trends and emerging risks

Responsibilities

• Plan and perform IT control and compliance walkthroughs across the Company’s infrastructure, applications, and operating procedures to assess the design and operation of IT General Controls (ITGCs)
• Evaluate the IT control environment for risk to the organization and provide actionable recommendations for improvement
• Perform ITGC and application control testing, preparing workpapers in line with professional standards to support conclusions and suggest improvements as needed
• Maintain Sarbanes-Oxley (SOX) related process and control documentation
• Stay informed on key IT risks, cybersecurity, robotic process automation (RPA), and advanced data analytics. Collaborate with the IT Compliance Manager to provide guidance on IT risks and controls
• Build and maintain strong relationships with management to foster effective communication and collaboration
• Conduct SOC 2 Type 2 reviews, including mapping Complementary User Entity Controls (CUECs)
• Collaborate with internal and external IT auditors as required
• Continue developing skills in programming, automation, and data visualization through training and coursework to meet IT controls and compliance needs

Preferred Qualifications

• CRISC certification preferred
• Experience conducting Root Cause Analysis is preferred
• Experience with query languages (SQL, VB.Net, VBScript) is preferred
• Familiarity with automation technologies (e.g., UI Path) and/or data visualization tools (e.g., Qlik) is a plus