SOX IT Analyst (FinTech Industry)

We are conducting a search for a detail-oriented SOX IT Analyst with a bachelor’s degree in Information Systems, IT, or Computer Science, along with 2–3+ years of experience in IT audit, IT compliance, and SOX compliance. Experience supporting SOX programs within a publicly traded company and familiarity with ERP systems such as NetSuite, Oracle, or SAP are highly preferred. 

What You'll Do:
The ideal candidate will assess IT General Controls (ITGCs) and IT application controls (ITACs), assist with annual SOX scoping activities, and partner with internal and external auditors to ensure the organization maintains a strong internal control environment. This position will report to the SOX Manager in the Finance department.

• Coordinate and support IT General Controls (ITGCs) across various areas, including logical access, change management, computer operations, and data backup/recovery.
• Document control walkthroughs, testing procedures, and findings in accordance with SOX requirements.
• Identify and track control deficiencies; work with control owners on remediation and monitor resolution. 
• Collaborate with external auditors during SOX audit cycles by providing evidence and responding to inquiries. 
• Support risk assessment and annual scoping activities.
• Assist in continuous improvement initiatives to strengthen the IT control framework. 

What You'll Bring:

• Bachelor’s degree or the equivalent in Information Systems, Information Technology, Accounting, Finance, Computer Science, or a related field
• 2-3 or more years of experience in IT audit, IT compliance, SOX compliance, or a related field. 
• Solid understanding of SOX Section 302 and 404 requirements and IT General Controls (ITGCs). 
• Strong written and verbal communication skills, with the ability to work cross-functionally. 
• Proficiency in documenting control evidence and preparing workpapers.
• Experience supporting SOX compliance in a publicly traded company.
• Familiarity with ERP systems such as NetSuite, Oracle, or SAP.
• Experience with GRC tools (e.g., AuditBoard, Archer, or ServiceNow).
• Knowledge of cybersecurity or control frameworks such as COBIT, NIST, or ISO 27001.
• Professional certifications such as CISA, CIA, or CPA are a plus.