Senior IT Internal Controls Analyst

Overview

Serve as Information Technology's primary liaison and coordination point for internal audit, external audit, Finance, risk, compliance, cybersecurity, application owners, infrastructure teams and third-party service providers, supporting the design, documentation, testing, monitoring and continuous improvement of IT controls for reliable financial reporting, with emphasis on Sarbanes-Oxley (SOX) systems.

What you'll do

• Serve as the primary IT liaison for Internal Audit, External Audit, Finance, Risk, Compliance and other stakeholders on IT controls and audit-related activities.
• Coordinate audit planning, walkthroughs, evidence collection, testing requests and responses to support internal and external audits.
• Support the organization's SOX compliance program across financially relevant systems, applications and business processes.
• Evaluate and monitor IT General Controls (ITGCs), including user access management, segregation of duties, change management, incident management and backup/recovery controls.
• Support the design, documentation, testing and monitoring of automated controls, application controls and key financial reporting controls.
• Facilitate risk assessments, control reviews, deficiency management and remediation activities to improve control effectiveness.
• Maintain risk and control documentation, including process narratives, flowcharts, control matrices and audit-support documentation.
• Provide controls and governance support for system implementations, ERP projects, upgrades, integrations and digital transformation initiatives throughout the SDLC.
• Review project deliverables, security roles, data migration activities, testing results and deployment readiness from a controls and compliance perspective.
• Develop audit readiness, remediation and control-performance reporting for management and leadership teams.
• Partner with ServiceNow, Microsoft Dynamics 365, Finance, Cybersecurity, Infrastructure and Application teams to support technology governance and compliance requirements.
• Identify opportunities to automate controls, standardize processes, improve audit readiness and strengthen the overall control environment.

What you'll need

• Bachelor's degree in Information Systems, Computer Science, or a related discipline.
• Minimum 2+ years of experience in IT Audit, IT Internal Controls, SOX Compliance, Technology Risk Management, ERP Controls, or a related field.
• Strong experience supporting internal and external audits, including audit coordination, walkthroughs, evidence collection and testing activities.
• Hands-on experience with IT General Controls (ITGCs), Automated Controls, Application Controls, Risk Assessments and Compliance Programs.
• Strong understanding of SOX requirements, financial reporting controls and technology risks impacting business processes.
• Experience with risk and control documentation, control testing support, deficiency assessment and remediation validation.
• Practical knowledge of enterprise applications, identity and access management, databases, cloud platforms, integrations and IT operations.
• Strong understanding of Software Development Lifecycle (SDLC), project governance, testing, release management and change management processes.
• Experience supporting ERP implementations, cloud migrations, integrations, system upgrades or major transformation initiatives.
• Knowledge of industry frameworks such as COSO, COBIT, NIST, ISO 27001, ITIL or equivalent governance frameworks.
• Excellent analytical, problem-solving, documentation, communication and stakeholder-management skills.
• Ability to manage multiple priorities in a complex global environment while maintaining attention to detail and audit-quality standards.

Nice to have

• Experience with ServiceNow ITSM, Governance, Risk & Compliance (GRC), Audit Management or related modules.
• Experience supporting Microsoft Dynamics 365 Finance & Operations (FinOps) and Project Operations (Proj Ops).
• Knowledge of Segregation of Duties (SoD) analysis, ERP security design, workflow controls and financial system governance.
• Experience supporting enterprise ERP transformations, cloud-based platforms and global technology implementations.
• Familiarity with third-party assurance reporting, SOC reports, complementary user entity controls (CUECs) and vendor risk management.
• Experience working within large, global, regulated, engineering, professional services or multi-provider environments.
• Knowledge of business process controls related to finance, accounting, project management and reporting processes.

Details

• Location: Chennai, Tamil Nadu, India.