Senior Cyber Security Controls Assessor

We are seeking an experienced Senior SOX IT Compliance Analyst to support IT internal controls over financial reporting. The ideal candidate will have strong expertise in SOX compliance, IT General Controls (ITGC), IT auditing, risk assessment, and control testing.

This individual will independently evaluate complex IT processes, conduct control walkthroughs, identify control gaps, recommend remediation strategies, and collaborate with IT teams, business stakeholders, internal audit, and external auditors to ensure effective SOX compliance., * Serve as a subject matter expert on SOX IT compliance and IT General Controls (ITGC).

• Provide guidance to IT teams, system owners, and business process owners on control identification, documentation, testing, and remediation.
• Develop and establish testing objectives and test plans for in-scope IT General Controls.
• Conduct walkthroughs of medium to complex IT systems and business processes to identify control gaps and weaknesses.
• Evaluate the design and operating effectiveness of IT controls across applications, operating systems, databases, and IT infrastructure.
• Assess ITdeficiencies, determine potential financial reporting impacts, and recommend appropriate corrective actions.
• Coordinate with system owners to monitor control deficiencies and track remediation activities.
• Support internal and external SOX audits and coordinate audit requests.
• Perform and document IT entity-level controls testing.
• Conduct quality assurance reviews of completed SOX testing documentation.
• Provide practical control recommendations and influence stakeholders to implement effective control solutions.
• Prepare quarterly compliance reports and presentations for leadership and the Audit Committee.
• Train process owners on SOX compliance requirements and internal control procedures.
• Manage the Workiva (WDesk) SOX module to support quarterly testing and compliance deliverables.

Education: Bachelor’s degree in MIS, Computer Science, Accounting, Business, or equivalent experience, * Bachelor’s degree in Management Information Systems, Computer Science, Accounting, Business, or a related discipline, or equivalent experience.

• Minimum 5 years of relevant experience in SOX IT Compliance, IT Audit, IT Risk, or related areas.
• Strong hands-on experience with SOX IT compliance and IT General Controls (ITGC).
• Experience conducting IT control walkthroughs, risk assessments, and control testing.
• Strong understanding of User Access Management, Segregation of Duties (SoD), and IT control environments.
• Experience evaluating control deficiencies and developing remediation recommendations.
• Ability to independently assess complex IT processes and identify control gaps.
• Strong knowledge of COSO, COBIT, and AS5 auditing standards.
• Excellent written and verbal communication skills with the ability to communicate technical audit findings to business stakeholders and leadership.
• Strong analytical, problem-solving, organizational, and stakeholder management skills.

Preferred Qualifications

• Previous experience working with Big 4 public accounting firms (Deloitte, EY, PwC, or KPMG).
• Experience in the energy, utility, or public utility industry.
• Experience with internal and external audits.
• Familiarity with Workiva (WDesk) SOX compliance platform.
• Master’s degree in MIS, Computer Science, or a related discipline.

Required Certification

• Certified Information Systems Auditor (CISA).

Additional Preferred Certifications

• Certified Internal Auditor (CIA).
• Certified Information Systems Security Professional (CISSP).
• Certified Public Accountant (CPA).