Senior Audit & Compliance Analyst, ITC

Overview

Lead the IT portion of Nike's Sarbanes-Oxley (SOX) and IT compliance program within the Core ERP Technology audit and compliance team, with a focus on Nike's Core ERP systems.

What you'll do

• Create, adopt and execute a strategic plan to align SAP compliance and audit with industry best practices and SOX compliance.
• Manage Master Service Partner teams to execute large initiatives and smaller ongoing support projects.
• Build strong relationships with third-party providers to deliver the tools and skills needed for the application security strategy.
• Coordinate and lead system redesign and upgrade/patching activities for the application security team.
• Develop and operate application security services relevant for applications.
• Work closely with other Nike teams to help implement and operate security controls.
• Deliver expert consulting on IT process controls and IT audit readiness.
• Partner with external audit teams and with Nike IT Audit and Nike IT Infrastructure Security.

What you'll need

• Bachelor's degree in IT, Business, Business Information Management, or a related field, or 5 additional years of relevant experience in lieu of a degree.
• 5 years' professional experience in IT Application Development, Application Implementation, or Production Support, or 3 years' professional experience in IT infrastructure security engineering or operations.
• 4 years of IT auditing or other formal internal controls experience.
• 3 years of SAP audit experience.
• Excellent written and verbal communication.
• Proven ability to be self-directed and information-seeking and to work effectively in cross-functional teams.

Nice to have

• Experience with a public accounting firm, audit services firm, or Fortune 500 company is strongly preferred.
• Experience in assessing, designing, and implementing application security, IT processes and controls that adhere to documented policies, procedures and standards.
• Experience with IT best practice methodologies (e.g., CMMI, COBIT, ITIL) or with the IT security framework ISO-27001.
• CISSP, CISA or CISM certifications are preferred.

Details

• Location: Karnataka, India.