Job Description

Job Overview:

The Senior IT Pillar Specialist – Applications Controls and Compliance is a hands-on compliance professional supporting the organization's SOX compliance program, ISO certification, IT audits and maintaining an effective IT control environment.

The primary objective is to focus on current applications architecture and ensure future applications are compliant to McDermott's standards.

This role works hand in hand with IT, cybersecurity, finance, business process owners, Internal Audit, and external auditors to document controls, perform walkthroughs, validate evidence, execute control testing, support audits, and suggest process improvements. The position requires strong communication skills, attention to detail, analytical capabilities, and the ability to build productive working relationships across technical and non-technical teams.

The successful candidate will help ensure IT controls are consistently executed, properly documented, supported by appropriate evidence, and maintained in a manner that supports external audit requirements and overall audit readiness.

Responsibilities

Key Tasks and Responsibilities:

Maintain and continuously improve SOX IT General Controls (ITGCs), IT Application Controls (ITACs), and IT-Dependent Manual Controls (ITDMs) supporting financial reporting
Develop and maintain audit-ready documentation including narratives, process flows, risk and control matrices (RACMs), control procedures, evidence requirements, and testing support materials for Business Applications
Coordinate and perform process walkthroughs with control owners, technology teams and process owners to validate control execution and identify control gaps
Evaluate control design and operating effectiveness across:

Access Management
Change Management
System Development Lifecycle (SDLC)
Disaster Recovery Definition for Critical applications
Definition and implementation Segregation of Duties (SoD)
IT-Dependent Manual Controls (ITDMs)
Management Review/Certification Controls

Assess completeness and accuracy of reports, system-generated data, and evidence used to support key controls
Support annual SOX testing, management assessments, and external audit activities
Assist control owners in addressing deficiencies and strengthening control execution
Conduct interviews and walkthroughs with, business stakeholdersPerform testing of controls, evaluate supporting evidence, document results, and communicate findings
Develop practical recommendations that improve controls while minimizing unnecessary operational burden
Track audit findings and remediation activities through resolution
Analyze large data sets with the use of AI tools to support audits, control testing, and risk assessments
Perform user access reviews, role analysis, segregation of duties assessments, exception analysis, sampling, reconciliations, and trend analysis
Validate system populations and report completeness and accuracy used for SOX testing
Identify anomalies, outliers, control failures, and compliance concerns through data analysis
Partner with IT and business stakeholders to improve control processes, documentation quality, and audit readiness
Recommend opportunities to simplify, standardize, and mature governance and compliance activities
Support compliance initiatives aligned with SOX and ISO 27001 requirements
Participate in reviews of third-party assurance reports (SOC reports) and technology risk assessments as assigned
Build working relationships with IT, cybersecurity, finance, Internal Audit, external auditors, and control owners
Translate technical risks, control issues, and audit findings into clear business language
Influence positive change through collaboration, credibility, and strong communication rather than formal authority

Qualifications

Essential Qualifications and Education:

8+ years of direct-full-time experience in IT audit, SOX compliance, IT controls, cybersecurity governance, internal controls or Technology compliance programs
Bachelor's degree in Information Systems/ IT/ Cybersecurity/ Computer Science or a related field
Experience Pathway: Equivalent direct, full-time, hands-on experience specialized in SOX and IT audits in lieu of a degree

Demonstrated experience performing 5 of the following:

ITGC testing
ITAC testing
ITDM testing
Management Review Control assessments
Risk assessments
Audit execution
Control effectiveness reviews
Deficiency remediation support

Strong understanding of:

SOX 404
Internal Control over Financial Reporting (ICFR)
IT General Controls
Identity & Access Management
Change Management
ERP and Financial Reporting Systems
Cybersecurity Controls

Advanced Microsoft Excel skills including pivot tables, reconciliations, data analysis, exception reporting, and audit sampling or experience using AI tools
Excellent written, verbal, facilitation, interviewing, and relationship management skills
Ability to work independently while managing multiple concurrent audits, reviews, and compliance initiatives

Preferred Qualifications and Education:

CISA and ITIL certification are preferred
Additional certifications such as CISSP, CRISC, CIA, CISM, CGRC are desirable
Experience supporting SOX readiness, IPO readiness, or public-company compliance programs
Experience with large-scale ERP environments
Experience with ServiceNow, AuditBoard, Oracle Fusion ERP, JDE , Azure, Saviynt, or similar enterprise platforms
Experience working within engineering, construction, energy, EPC, manufacturing, or industrial environments
Experience supporting global technology organizations across multiple geographic regions and third-party service providers
US visa would be a good to have

#DICE