Security Analyst

We are seeking a Senior Security Analyst to support our team with an increased volume of SOX compliance work. This position involves strengthening IT General Controls (ITGCs), remediating Separation of Duties (SoD) issues, and driving remediation efforts to completion. The ideal candidate will work independently after onboarding and facilitate collaboration between compliance, risk, technical, and business teams., * Support SOX workflows and drive remediation efforts.

• Remediate Separation of Duties (SoD) issues and strengthen IT General Controls (ITGCs).
• Collaborate with control owners, internal cyber teams, technical engineering teams, and business stakeholders.
• Facilitate discussions between compliance, risk, technical, and business teams to keep remediation efforts moving toward closure.
• Understand and evaluate the sufficiency of compensating controls.
• Ask meaningful technical questions during remediation meetings to guide solutions.

• Experience with SOX compliance is required.
• Experience working within a large enterprise environment with numerous systems in scope for SOX.
• A technical background is preferred over a traditional audit background. Examples include experience in a Security Operations Center (SOC), Incident Response, Security Engineering, IAM, Access Administration, or Cloud Security.
• Demonstrated ability to communicate effectively with business stakeholders, technical teams, control owners, and compliance personnel.

Technical Skills:

• Strong understanding of Identity & Access Management (IAM) principles, including access administration, identity governance, user provisioning, and access controls.
• Knowledge of cloud platforms (AWS, Azure, Google Cloud Platform) and cloud security concepts.
• Ability to participate in technical remediation discussions and understand proposed solutions.

Preferred Qualifications

• Experience with both SOX and SOC (SOC 1/SOC 2).
• An educational background such as an MIS degree or a Computer Science minor.
• Certifications such as CRISC, CISA, CISM, or CISSP are considered valuable. Cloud security certifications are a bonus.
• A desire to move into a GRC-focused career path.

Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRateds Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.

Everforth Apex uses a virtual recruiter as part of the application process. Click for more details. By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from Everforth Apex and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at