InfoSec Quality and Compliance Analyst (IT SOX Analyst)

Responsibilities

IT SOX Analyst

• Perform various system access administrative tasks for SoX governed applications, including but not limited to provisioning, de-provisioning, user maintenance, and recertification activities, on a weekly, monthly, and quarterly basis
• Coordinate with functional counterparts to implement changes resulting from audit controls
• Provide evidence to support internal audit logical security controls across SoX governed applications
• Coordinate with access owners to conduct periodic access reviews
• Coordinate with SAP Security specialists for role creation/maintenance
• Provide weekly metrics on number of requests and audit controls processed

Requirements

• Minimum of two years Application Security experience (Application or Database Administration)
• Minimum of two years of SoX audit experience working with internal and external auditors
• Knowledge of access provisioning, de-provisioning, role administration
• Experience with delivery of audit evidence to support logical security access controls
• Experience managing workload using IT Service Management ticketing tools, ServiceNow preferred
• Experience with security administration/risk management of SAP systems or solutions complementing SAP, such as Blackline, SailPoint, Ariba, and SNOWFLAKE