Senior IT Audit & Compliance Specialist

About the Role

The Senior IT Audit & Compliance Specialist provides operational and analytical support across IT compliance domains, including SOX, Sustainability, Information Security, AI Compliance, training, reporting, and compliance administration.

As a senior individual contributor, the role independently coordinates compliance activities, reviews evidence and control documentation, performs control evaluations, documents conclusions, and drives structured follow-up with relevant stakeholders. The role contributes to the timely completion of compliance activities, high-quality and traceable evidence, accurate tracking of findings and remediation actions, and reliable management reporting.

The position offers broad exposure to global compliance activities, emerging governance areas, and opportunities to improve and streamline compliance processes.

Key Responsibilities

Experience: 7+ years

• Support the annual SOX compliance program, including planning, evidence coordination, deadline monitoring, control-execution tracking, maintenance of compliance management systems and related repositories, and onboarding of new SOX applications and controls.
• Review compliance evidence and control-execution documentation for completeness, relevance, accuracy, quality, traceability, and alignment with applicable control objectives.
• Perform independent control evaluations and document conclusions across SOX, Sustainability, Information Security, AI Compliance, and other applicable compliance domains.
• Evaluate IT General Controls, IT application controls, key reports, and Information Produced by the Entity, including coordinating evidence requests and assessing the completeness and relevance of supporting documentation.
• Coordinate with Application Owners, Control Owners, and other stakeholders to obtain appropriate evidence, clarify control execution, resolve documentation gaps, and complete compliance activities within agreed deadlines.
• Track and follow up on deficiencies, findings, remediation actions, audit observations, and related commitments in applicable compliance and remediation tracking systems.
• Track vulnerability-remediation activities, coordinate follow-up with responsible stakeholders, and evaluate supporting closure evidence for completeness and adequacy.
• Maintain compliance documentation, procedures, templates, work instructions, training materials, guidance documents, and knowledge repositories.
• Prepare recurring dashboards, management reports, status updates, and summaries covering compliance completion, evidence quality, open findings, remediation progress, overdue actions, and emerging risks or concerns.
• Perform data validation and reconciliation across compliance data sources to support accurate, complete, and reliable reporting.
• Support UAT of changes in GRC tooling
• Analyze compliance data to identify trends, recurring findings, control-performance issues, overdue actions, and areas requiring management attention.
• Support annual compliance e-learning and awareness activities, including tracking completion rates, validating completion data, and coordinating follow-up where required.
• Support control rationalization, risk assessment, and periodic review activities to help maintain appropriate and risk-aligned compliance coverage.
• Identify opportunities to standardize, simplify, and automate repetitive compliance activities, and support the implementation of appropriate reporting, workflow, and automation improvements.
• Collaborate with global stakeholders across functions, business units, and locations, escalating risks, delays, dependencies, and quality concerns in a timely manner.

Required Qualifications and Experience

• Bachelor's degree in Information Technology, Information Systems, Cybersecurity, or a related discipline, or equivalent relevant practical experience.
• Minimum of five years of relevant professional experience in IT audit, IT compliance, risk management, internal controls, information security, or a related governance, risk, and compliance function.
• Working knowledge of IT General Controls, IT application controls, audit evidence, control documentation, control execution, and findings and remediation management.
• Experience reviewing evidence and control documentation for completeness, relevance, traceability, and alignment with defined control requirements.
• Experience coordinating compliance, audit, assessment, or remediation activities with Control Owners, Application Owners, auditors, or other business and IT stakeholders.
• Strong analytical skills, including the ability to validate data, identify inconsistencies, evaluate supporting documentation, and prepare accurate reports and management updates.
• Strong written and verbal communication skills in English.
• Ability to work independently as an individual contributor, manage multiple priorities, and escalate risks, delays, and quality concerns appropriately.

Preferred Qualifications and Experience

• Knowledge of SOX compliance, including ITGCs, IT application controls, key reports and Information Produced by the Entity testing, evidence requirements, and deficiency remediation.
• Experience in one or more additional compliance domains, such as Information Security, Sustainability, AI Governance, regulatory compliance, or technology risk.
• Familiarity with frameworks and standards such as NIST SP 800-53, NIST Cybersecurity Framework, COBIT, ISO 27001, internal control frameworks, or AI governance principles.
• Experience working with Internal Audit, External Audit, SOX Controllership, Information Security, or other assurance and governance functions.
• Familiarity with tools such as SAP, Workiva, Archer, ServiceNow, Saviynt, Power BI, SharePoint, or equivalent solutions. Prior knowledge of a specific platform is not mandatory.
• Experience supporting compliance process improvement, reporting enhancement, workflow optimization, or automation initiatives.
• Professional certification such as CISA or CISSP. Certification is preferred but not mandatory.

Skills and Competencies

• Proactive and accountable approach to work.
• Strong analytical and problem-solving skills.
• Clear and effective stakeholder communication.
• Structured and detail-oriented way of working.
• Sound professional judgment when evaluating compliance evidence and documentation.
• Ability to manage competing deadlines and follow through on open activities.
• Ability to identify and escalate risks, delays, dependencies, and quality concerns promptly.
• Ability to collaborate effectively with global and cross-functional stakeholders.
• Commitment to maintaining appropriate confidentiality when handling audit, compliance, security, and business information.

Success Measures

Success in the role is measured by:

• Timely completion of assigned compliance activities.
• Complete, accurate, and traceable compliance documentation.
• High-quality evidence and assessment documentation aligned with applicable control objectives.
• Accurate tracking and timely follow-up of findings, deficiencies, remediation actions, and audit observations.
• Timely escalation of risks, delays, dependencies, and evidence-quality concerns.
• Effective collaboration with global stakeholders and Control Owners.
• Meaningful contribution to the standardization, simplification, and continuous improvement of compliance processes.