Senior Analyst, Internal Controls & SOX

Role Overview We are seeking a skilled and motivated Senior Analyst, IT Internal Controls & SOX who brings more than technical SOX expertise – someone who understands both IT infrastructure and the business it supports, and can translate that understanding into practical, valuable insights. Reporting to the Sr. Manager IT Internal Controls & SOX, the analyst will assist in the design, implementation, and monitoring of IT controls to ensure regulatory compliance and operational effectiveness. Key Responsibilities Support the overall IT SOX program, including control and key report testing. Apply working knowledge of cloud infrastructure (AWS, Azure, GCP) to assess controls related to cloud security, access management, change management, and computer operations. Identify and evaluate opportunities to apply AI in streamlining controls testing and reporting processes. Maintain a comprehensive Risk Control Matrix (RCM) for ITGC and ITAC as part of the overall SOX program. Evaluate IT control processes to identify risk gaps, document, track, and report identified issues. Provide remediation guidance and track action plans in Workiva. Collaborate with external auditors and IT/business stakeholders, providing documentation, context, and support as needed. Assist in delivering IT-specific internal control training for different business units. Contribute to IT risk assessments and SOX scoping activities, prioritizing key risk areas across cloud systems, applications, tools. Manage the overall Workiva (GRC) platform and act as a system administrator. Proactively communicate observations, risks, and recommendations to management. Qualifications & Experience Bachelor’s degree in Information Systems, Accounting, Finance, or related field. 2–4 years of experience in IT internal controls, IT auditing, or a similar role in a public company or accounting firm. Solid understanding of SOX regulations and the COSO framework, with broader knowledge of IT general controls, business processes, and technology support. Practical knowledge of ITGC domains such as Change Management, Access Management, Computer Operations, Software Development Life Cycle. Experience with IT Application Controls and Key Reports. Working knowledge of cloud platforms – AWS, Azure, and/or GCP, including familiarity with cloud security and access controls. Strong analytical and problem‑solving skills, connecting technical findings to business impact. Excellent communication and interpersonal skills, comfortable engaging stakeholders at all levels. Collaborative and proactive mindset, contributing ideas rather than following process. Preferred certifications: CISA, CISM, CRISC, CC (Certified in Cybersecurity), CISSP, or cloud certifications such as AWS Certified or Google Cloud Certified. Benefits The expected salary range for this position is $90,000 to $110,000, adjusted based on skills, experience, and location. HUB International offers comprehensive benefit and total compensation packages, which may include health, dental, vision, life, disability insurance, FSA, 401(k) accounts, paid time off, annual bonuses, and equity or commission opportunities for eligible positions. HUB International Limited is an equal opportunity employer that does not discriminate on the basis of race/ethnicity, national origin, religion, age, color, sex, sexual orientation, gender identity, disability, or veteran status, or any other characteristic protected by local, state or federal laws, rules or regulations. #J-18808-Ljbffr HUB International