Sr Analyst - IT Controls

Function Overview

The Finance India organization partners across General Mills to provide financial expertise to guide and govern the company. We bring a distinctive skill set to help the company sustainably drive strong returns on investment, whether that's brand investments, capital investments or resource investments. We hold ourselves accountable for the areas where we are uniquely positioned to drive results - what we call our Strategic Priorities - but we never lose sight of the fact that we only truly win when the company wins. The Finance function operates as a global team through the partnership of a series of enterprise-focused and business-embedded groups.

Purpose of the role

• The purpose of this role is to support and strengthen the organization's IT internal control environment by executing high-quality testing of IT General Controls (ITGC) and IT Application Controls (ITAC) as part of SOX Compliance
• The role focuses on identifying, assessing, and mitigating IT risks related to system access, change management, IT operations, and automated application controls through disciplined application of SOX methodology, robust documentation, and clear reporting. The role also contributes to continuous improvement initiatives to enhance control effectiveness, audit readiness, and overall IT governance maturity.

Key Accountabilities

Operational Excellence

• Execute SOX-compliant testing of IT General Controls (ITGC) and IT Application Controls (ITAC), applying standard methodology across planning, execution, documentation, and evaluation.
• Identify control deficiencies, assess risk and impact, and clearly communicate findings, remediation requirements, and timelines to stakeholders.
• Partner with the IT Controls - SOX Governance team (US) to support the global IT SOX testing program and ensure consistent implementation of controls across systems and regions.
• Prepare and deliver high-quality documentation and reporting for SOX audits, automation governance reviews, and IT policy and process assessments.
• Support and facilitate SOC 1 reviews, system access reviews, and related compliance activities, including tracking and validation of remediation actions.
• Drive continuous improvement initiatives to enhance the efficiency, quality, and audit readiness of IT control testing and compliance processes.
• Communicate effectively with Business and stakeholders at global level and manage testing, expectations, and proactively escalate risks or execution challenges.
• Assist/Lead in coordination of annual external IT audit process with external auditors
• Work and influence IT business teams personnel including senior executives in IT Team to resolve internal and external audit findings in a timely manner.
• Lead governance of risk assessment and control design of segregation of duties (SAP GRC)
• Support team execution by providing guidance, monitoring progress, managing dependencies, and ensuring timely completion of assigned activities.

Continuous Improvement, Projects, Initiatives

• Maintain and update IT controls documentation, including OPLs, RACIs, process narratives, and control matrices.
• Drive continuous improvement initiatives to enhance efficiency, consistency, and quality of ITGC and ITAC testing processes.
• Participate in Finance India and cross-functional governance initiatives, projects, and working groups.
• Support ad-hoc initiatives related to enterprise risk management, controls optimization, and compliance readiness.

Pursue ongoing professional development through relevant IT risk, SOX, audit, and controls-focused training and certifications

Bachelors degree in Accounting or Finance (MBA/CA) or IT

CISA or equivalent certification in IT Risk

5-7 years of experience in IT audit, preferably with a Big 4 firm or multinational company. Flavor of process audits is preferred.

Strong knowledge of IT auditing techniques and IT control processes (change management, systems development life cycle, information security, IT operations, etc.)

Strong IT Risk Management requirements and frameworks, including SOX, COBIT, and COSO, (more than just SOX experience)

Strong influencing and communication skills

Ability to work independently, manage multiple priorities concurrently, and complete projects on schedule with a high degree of accuracy

Other Responsibilities

Design and implement process standardization initiatives, governance reviews, process reviews, and quality control as per business requirement.

Apply sound knowledge of risk and control frameworks to support robust process governance and compliance standards.

Build and maintain trusted relationships with stakeholders to support business objectives and expand the team's scope of work.

General Responsibilities

Follow all company policy & procedures

Demonstrate high standards of conduct which are not compromised even under highly stressful circumstances

Communicate effectively with stakeholders & co-workers

Set high standards for results and continually raise these standards

Competencies / Behaviours required for the Job

• IT control Risk Management
• ITAC and ITGC controls testing
• Attention to detail
• MS Office (Excel, PowerPoint, Word etc.)
• Collaboration
• Problem Solving
• Continuous Improvement
• Excellent written and verbal communication skills
• Shifts priorities quickly when necessary
• Interpersonal Skills
• Stakeholder management