Senior IT Compliance Analyst

About Company :

The company, publicly traded on the NYSE, reports annual revenues of approximately $450 million and holds a market capitalization near $3.5 billion. As a member of the S&P 600 Cosmetics Index since 2004, it has steadily expanded its brand portfolio. Today, it offers a diverse range of cosmetics, including Well People, a clean beauty label, and Keys Soulcare, a lifestyle beauty brand developed in collaboration with Alicia Keys. Its products are widely available online and at major U.S. retailers, with a steadily growing international presence.

Position Summary :

We are seeking a highly skilled and proactive Senior IT Compliance Analyst to join our dynamic, fast-paced team. The Senior IT Compliance Analyst will be responsible for supporting the development, implementation, and continuous improvement of our IT compliance framework. Your responsibilities will include testing IT controls, conducting process reviews, performing risk assessments, and leading various compliance initiatives to ensure adherence to regulatory requirements and industry best practices.

Key Responsibilities :

• ITGC and Application Controls Testing : Performing IT general controls (ITGC) and application controls testing in accordance with SOX and other regulatory requirements.
• Remediation : Identifying control gaps through assessments and process reviews, recommending remediation actions, and tracking resolution progress.
• Vendor Risk Management : Reviewing Service Organization Controls (SOC) reports and supporting third-party vendor risk management activities.
• Policy Development : Creating and maintaining IT policies and procedures with regular updates to reflect changes in the IT environment.
• User Access Reviews : Facilitating quarterly user access reviews, including quality reviews of deliverables.
• Log Review Monitoring : Conducting quarterly log reviews, including SAP firefighter logs and administrator activity logs.
• Compliance Training : Assisting in the development and delivery of IT compliance training and awareness initiatives.
• Audit Engagements : Supporting audit preparations and facilitating engagements with internal and external auditors.
• Documentation : Creating process flow diagrams to document workflows and controls.
• Ad-hoc Projects : Managing special IT compliance projects and additional responsibilities as assigned.

Required Qualifications :

(ref : hirist.tech)