Description
The Audit and Compliance Analyst is responsible for ensuring IT and business operations adhere to internal controls, regulatory standards, and corporate policies. This role supports SOX compliance, access reviews, audit coordination, and privileged account monitoring across SAP and other enterprise systems.
Key Responsibilities
SOX Controls Monitoring (Production deployment checks)
- Conduct monthly and emergency SOX checks to validate : UAT completion and approval prior to production deploymentFinal IT approvals for code migrationValid change requests and proper documentationBusiness and IT approval workflows
- Review support messages for emergency changes and validate UAT results
Firefighter ID (FFID) Usage Oversight
Monitor and review Firefighter account activity across SAP systemsUpdate weekly scorecards and audit repositoriesSend re-confirmation emails to business ownersTrack exception approvals and ensure compliance documentationConduct Firefighter uPerform training sessionsAudit Coordination
Respond to adhoc audit requests including : IT SOX, financial compliance, integrated audits, statutory auditsSupport internal and external audit teams with required documentationAccess and Account Management
Monitor default, generic, and shared accounts for complianceReview privileged access and critical transactions in SAPValidate batch job and interface processesConduct annual user access reviews and remediate findingsEnsure timely removal of terminated users and inactive accountsPerform SoD checks and validate dialog account validity datesAdmin and Developer Access Control
Restrict super user access for system and security administratorsMonitor developer access to ensure no production deployment rightsTrack code changes in test / QA environmentsReporting and Documentation
Generate SM20 reports for FFID usage on sensitive transactionsMonitor system configuration changes and login attemptsMaintain audit repositories and compliance logsOperational Oversight
Submit weekly status reports and time trackingValidate and update approver lists for access and change requestsEnsure compliance with corporate password management policiesRestrict access to critical application / data files and utilitiesRequired Qualifications
Bachelor’s degree in information systems, or related field2+ years of experience in IT audit, compliance, or risk managementStrong understanding of SOX, SAP security, and access controlsFamiliarity with Firefighter ID management and SM20 reportingExperience with GRC ARM , GRC SoD analysis, and batch job monitoringExcellent documentation and communication skillsAbility to manage multiple audits and compliance tasks simultaneously