The Team: 

Our Global Financial Controls team is committed to ensuring the highest standards of financial integrity and regulatory compliance. What sets our team apart is our collaborative and dynamic approach to compliance. We value: 

Teamwork and Collaboration: We work closely together, leveraging each team member's unique skills and expertise to achieve our common goals. 

Continuous Improvement: We are always looking for ways to enhance our processes and stay ahead of regulatory changes. 

Integrity and Accountability: We uphold the highest standards of integrity, ensuring that our work is accurate, transparent, and reliable. 

Innovation: We embrace innovative solutions and technologies to streamline our compliance efforts and improve efficiency. 

Commitment to Excellence: We are dedicated to maintaining excellence in all our compliance activities, ensuring that we meet and exceed regulatory requirements and deadlines. 

Our team's unique blend of expertise, dedication, and forward-thinking approach makes us a reliable function towards the reporting objectives of the company. 

Role Impact: 

The SOX Compliance Analyst – Logical Security & IT General Controls is responsible for the end-to-end execution of Logical Security controls supporting SOX compliance and the Global Financial Controls risk framework. This role requires hands-on experience executing Logical Security IT General Controls (ITGCs) and a strong understanding of SOX compliance requirements, COSO principles, and internal risk frameworks. 

The analyst will ensure that Logical Security controls across SOX in scope systems are designed appropriately, executed effectively, and compliant with SOX and enterprise risk standards, working closely with Technology, Finance, Internal Audit, and external auditors. 

Role Responsibilities 

Financial System Security  

• Execute end to end Logical Security controls for SOX in scope applications, mainly including:  

• User Access provisioning 

• Periodic access recertification 

• Validate completeness, accuracy, and timeliness of Logical Security evidence  

• Assess segregation of duties (SOD) conflicts and support remediation efforts where required  

• Evaluate role design, access models, and access restrictions for SOX relevant systems 

• Support centralized access governance and Logical Security standardization initiatives 

• Identify risks related to unauthorized access, excessive privileges, or control breakdowns impacting financial reporting 

• Prepare/maintain up to date Standard operating procedures (SOP’s) against each process and control execution. 

SOX Compliance & Risk Framework Alignment 

• Ensure Logical Security controls are aligned with SOX requirements, COSO principles, and internal risk framework standards  

• Maintain and update Risk & Control Matrices (RCMs), control narratives, and supporting documentation related to Logical Security  

• Identify control gaps or deficiencies, support root cause analysis, and track remediation through closure  

• Apply a risk based approach when evaluating control design and operating effectiveness  

• Act as a key contact for external auditors for Logical Security and ITGC related SOX testing  

• Support or engage in walkthroughs, testing, and PBC requests with Internal / External Auditors 

• Support management reporting on SOX status, Logical Security issues, and remediation progress 

 Continuous Improvement 

• Identify opportunities to strengthen Logical Security control, maturity and consistency  

• Contribute to SOX and ITGC methodology updates, templates, and control standards 

• Leverage automation opportunities to reduce manual errors and time required for control execution 

What We’re Looking For: 

Basic Required Qualifications: 

• Bachelor’s degree in information systems, Accounting, Finance, or a related field  

• CISA preferred or CIA is a plus 

Experience 

• 2 to 3 years of experience in a similar role with multi-national organization 

Technical Skills 

• Strong understanding of SOX, COSO, and ITGC frameworks  

• Hands on experience with Logical Security controls across systems such as:  

• ERP platforms (e.g., SAP, Oracle, Workday) 

• Billing and revenue systems (e.g., SFDC, CPQ) 

• Identity and Access Management tools (e.g., SailPoint, CyberArk, Okta) 

• Ability to assess automated, IT dependent, and manual Logical Security controls  

• Strong documentation, analytical, and issue assessment skills. 

#LI-RS2