Specialist - IT Risk and Compliance

Company Profile

Lennox (NYSE : LII) Driven by 130 years of legacy, HVAC and refrigeration success, Lennox provides our residential and commercial customers with industry-leading climate-control solutions. At Lennox, we win as a team, aiming for excellence and delivering innovative, sustainable products and services. Our culture guides us and creates a workplace where all employees feel heard and welcomed. Lennox is a global community that values each team member's contributions and offers a supportive environment for career development. Come, stay, and grow with us.

Job Description

We are seeking a highly motivated and detail-oriented IT Compliance Analyst to join our Risk & Compliance team. The ideal candidate will be responsible for performing comprehensive IT compliance assessments, testing IT general controls and IT Automated controls and ensuring the organization adheres to internal policies and external regulatory requirements, including Sarbanes-Oxley (SOX). This role plays a critical part in maintaining a strong internal control environment and driving process improvement across the organization.

Key Responsibilities

• Assist in planning and scoping IT compliance and internal control assessments.
• Identify risk areas and develop internal control testing programs.
• Perform end-to-end IT compliance assessments, including evaluating effectiveness of risk and control frameworks.
• Test IT General Controls (ITGCs) across domains like change management, logical access, SDLC and IT operations.
• Assess IT Automated Controls across business functions such as payroll, inventory, and revenue.
• Document control walkthroughs using narratives and flowcharts.
• Develop, maintain, and present compliance workpapers and reports highlighting control deficiencies and recommendations.
• Collaborate with management to communicate findings and ensure timely remediation of audit issues.
• Support external audit activities by coordinating information requests and walkthroughs.
• Stay up to date with regulatory and industry developments in IT compliance and risk management.

Engage in continuous improvement efforts to enhance the efficiency and effectiveness of compliance processes

Qualifications

Preferred Skills

Skills Required

IT automated controls, IT compliance assessments, GRC platforms, documenting business processes, data analytics tools, risk and control frameworks