IT Senior Associate - Internal Controls

EXPERIENCE AND EDUCATIONAL REQUIREMENTS :

Bachelor s Degree with a preferred concentration in information system management, computer science, accounting or another related field.

One or more of the following certifications desired but not required : Certified Information Systems Auditor (CISA), Certified Information Systems Manager (CISM), Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC), Certified Public Accountant (CPA), Certified Internal Auditor (CIA) or Certified Fraud Examiner (CFE). Normally requires a minimum of three (3) years of experience in internal controls, public accounting and / or internal auditing with a focus on assessing controls around and within accounting information systems.

MINIMUM SKILLS, KNOWLEDGE AND ABILITY REQUIREMENTS :

• Working knowledge of Sarbanes-Oxley requirements.
• Self-starter, strong work ethic, adaptable and actively seeks opportunities to improve the SOX Program by sharing those recommendations for consideration as an agent for change.
• Strong understanding of IT controls, including ITGCs and automated controls.
• Knowledge of international control frameworks and standards, such as COSO, COBIT, ISO27001 and NIST.
• Strong understanding of IT and Information Security / Cybersecurity related controls, including identity and access management, privileged access management, system development life cycle methodologies, IT Operations, IT governance and other application specific control principles and risks in both cloud and on-premises infrastructures.
• Knowledge of different technologies and platforms such as Active Directory, Windows Servers, Unix / Linux, IBMi, SQL Server and Oracle databases and security concepts ((e.g., firewalls, public / private key encryption, VPN, etc.).
• Experience in reviewing SOC1 / SOC2 reports and performing assessments as a result of deficiencies identified over third-party organizations.
• Proficient in Microsoft Excel, including functions such as Vlookup, pivot tables, data validation, and analytical skills.
• Working knowledge of data analytic applications (e.g. Alteryx, IDEA, PowerBI) is preferred. Coding experience is a plus.
• Ability to communicate effectively both orally and in writing; ability to communicate with associates and management in a cross-functional matrix organization; solid teamwork and interpersonal skills to successfully interact and influence employees.
• Strong planning and organizational skills with attention to detail.
• PC literate with ability to learn systems and processes quickly (SAP ECC / S4, SAP GRC or MS D365 a plus)

WORK ENVIRONMENT :

The work environment characteristics described here are representative of those an associate encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions :

The noise level in the work environment is generally quiet.

PHYSICAL AND MENTAL REQUIREMENTS :

The physical demands described here are representative of those that must be met by an associate to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions :

• Sedentary physical activity requiring reaching, sifting, lifting, finger dexterity, grasping, feeling, repetitive motions, talking and hearing.
• Visual requirement is for close vision, distance vision, peripheral vision and ability to adjust focus.
• 50% or more time is spent looking directly at a computer.
• Associate is frequently required to stand, walk (or otherwise be mobile).
• Ability to deal with stressful situations as they arise.
• Working knowledge of Sarbanes-Oxley requirements.
• Self-starter, strong work ethic, adaptable and actively seeks opportunities to improve the SOX Program by sharing those recommendations for consideration as an agent for change.
• Strong understanding of IT controls, including ITGCs and automated controls.
• Knowledge of international control frameworks and standards, such as COSO, COBIT, ISO27001 and NIST.
• Strong understanding of IT and Information Security / Cybersecurity related controls, including identity and access management, privileged access management, system development life cycle methodologies, IT Operations, IT governance and other application specific control principles and risks in both cloud and on-premises infrastructures.

Skills Required

IT Sox, Sox Compliance, COSO, Cobit, nist, Sdlc