IT Audit Analyst

Maintain and update IT compliance documentation, policies, procedures, control narratives, and CMDB-related information. Execute and document SOX IT control testing, identify control deficiencies, track findings, and support remediation activities. Manage periodic user access reviews, including provisioning, deprovisioning, role-based access, and privileged access controls. Monitor and support IT change management controls, ensuring appropriate approvals, testing, implementation, and documentation. Ensure SDLC and system implementation documentation is complete, accurate, and retained for audit purposes. Review SOC 1 and SOC 2 reports for critical third-party vendors and maintain appropriate vendor compliance records. Support internal and external audits by gathering evidence, responding to audit requests, coordinating with stakeholders, and resolving exceptions. Identify opportunities to improve compliance processes, controls, and reporting through automation and workflow optimization. Utilize tools such as Microsoft Power Automate to streamline compliance processes and reduce manual activities. Partner with IT and business teams on system implementations, upgrades, process changes, and related compliance requirements. Maintain accurate compliance records and ensure controls remain aligned with organizational policies and regulatory requirements. Required Qualifications Strong experience in IT Compliance, IT Audit, SOX, IT Risk, ITGC, or GRC. Hands-on experience with SOX IT control testing and remediation. Strong understanding of IT General Controls (ITGC), including: Access Management Change Management SDLC Controls User Access Reviews Privileged Access Controls IT Operations Controls Experience reviewing SOC 1/SOC 2 reports and assessing third-party/vendor controls. Experience supporting internal and external audits, including evidence collection and remediation tracking. Strong documentation, analytical, organizational, and stakeholder management skills. Excellent communication skills with the ability to work effectively across IT, business, audit, and compliance teams. #J-18808-Ljbffr