PG
Senior IT Audit Analyst (Compliance)
Perfict Global, Inc.
- Location not stated
- Senior
- 1 day ago
- SOX
- Change Management
- SOC2
1 day ago
Location: Boston MA
Duration: Long Term
Job Type: Contract
Key Responsibilities
- Maintain and update IT compliance documentation, policies, procedures, control narratives, and CMDB-related information.
- Execute and document SOX IT control testing, identify control deficiencies, track findings, and support remediation activities.
- Manage periodic user access reviews, including provisioning, deprovisioning, role-based access, and privileged access controls.
- Monitor and support IT change management controls, ensuring appropriate approvals, testing, implementation, and documentation.
- Ensure SDLC and system implementation documentation is complete, accurate, and retained for audit purposes.
- Review SOC 1 and SOC 2 reports for critical third-party vendors and maintain appropriate vendor compliance records.
- Support internal and external audits by gathering evidence, responding to audit requests, coordinating with stakeholders, and resolving exceptions.
- Identify opportunities to improve compliance processes, controls, and reporting through automation and workflow optimization.
- Utilize tools such as Microsoft Power Automate to streamline compliance processes and reduce manual activities.
- Partner with IT and business teams on system implementations, upgrades, process changes, and related compliance requirements.
- Maintain accurate compliance records and ensure controls remain aligned with organizational policies and regulatory requirements.
Required Qualifications
- Strong experience in IT Compliance, IT Audit, SOX, IT Risk, ITGC, or GRC.
- Hands-on experience with SOX IT control testing and remediation.
- Strong understanding of IT General Controls (ITGC), including:
- Access Management
- Change Management
- SDLC Controls
- User Access Reviews
- Privileged Access Controls
- IT Operations Controls
- Experience reviewing SOC 1/SOC 2 reports and assessing third-party/vendor controls.
- Experience supporting internal and external audits, including evidence collection and remediation tracking.
- Strong documentation, analytical, organizational, and stakeholder management skills.
- Excellent communication skills with the ability to work effectively across IT, business, audit, and compliance teams.
Senior IT Audit Analyst (Compliance) · Perfict Global, Inc.