Security Analyst

Qualifications 5+ years of experiencein Security GRC, IT Audit, or a related field, with a strong focus onSOX complianceandIT General Controls (ITGCs)in aretail environment. Big 4 IT Audit experience or similar is required, with demonstrated expertise in evaluating and testing ITGCs and application controls supporting financial reporting. Deep understanding ofSOX Section 404requirements, including risk assessment, control design, and effectiveness testing. Experience working withineral and external auditors, including managing walkthroughs, evidence collection, and audit issue resolution. Strong knowledge ofITGC domainssuch as access controls, change management, IT operations, and system development lifecycle (SDLC). Familiarity withretail-specific systems(ex. Oracle EBS, Retail Management Systems, Order Management Systems, Warehouse Management Systems) and how they intersect with SOX compliance. Experience withcloud platforms(e.g., AWS, Azure),SaaS applications, and their implications for SOX controls. Proficiency in usingGRC toolslikeServiceNow, to streamline audit workflows and evidence management. Proven ability todrive remediation efforts, track control deficiencies, and support control owners in implementing sustainable solutions. Strong communication and stakeholder management skills, with the ability toinfluence cross functional teamsand align on compliance priorities. Demonstrated ability towork in a fast-paced, global retail environment, managing multiple priorities and time zones. Professional certifications such asCISA, CPA, or CIAare required. #J-18808-Ljbffr