Sr SOX IT Analyst

About the Role & Team

The Internal Audit function provides independent assurance over the effectiveness of internal controls, including the company’s Sarbanes-Oxley (SOX) Section 404 program. This role supports the execution of IT SOX compliance activities, with a focus on systems and technologies impacting financial reporting.

What You Will Do

As the Senior IT Auditor, you will be responsible for executing and, where appropriate, leading components of the IT SOX audit lifecycle, including planning, testing, and reporting. This role partners with business and IT stakeholders to evaluate control effectiveness, identify risks, and support remediation efforts.
 

SOX Audit Execution

• Execute SOX 404 testing of IT General Controls (ITGCs), including Access Management, change management, and IT operations
• Perform walkthroughs and document understanding of systems, processes, and controls across multiple business segments
• Execute testing of automated controls and key reports supporting financial reporting
• Ensure testing is performed in accordance with Internal Audit methodology and external audit expectations

IPE & Report Testing

• Perform testing of key reports and Information Provided by the Entity (IPE), including validation of completeness, accuracy, and report parameters
• Assess dependencies between ITGCs, IPE, and business process controls
• Document testing procedures and conclusions clearly to support audit reliance

Risk Assessment & Control Evaluation

• Identify and assess IT risks across applications, databases, operating systems, and cloud environments
• Evaluate control design and operating effectiveness and identify control gaps
• Support scoping activities by identifying in-scope systems, applications, and key controls
• Assess risks related to system implementations, upgrades, and changes impacting SOX controls

Issue Identification & Remediation Support

• Identify control deficiencies and document issues with clear root cause and impact
• Track and validate remediation activities as needed
   

Stakeholder Collaboration

• Collaborate with IT, Finance, and business stakeholders to understand processes and evaluate controls
• Communicate audit observations, risks, and recommendations clearly and professionally
• Build effective working relationships across business units
   

Required Qualifications & Skills

• Minimum 2+ years of experience in IT audit, SOX compliance, or risk advisory (Big 4 or large public company preferred)

• Understanding of IT General Controls (ITGCs), including Access Management, change management, and IT operations
• Experience with SOX 404 testing, including ITGCs, automated controls, and key reports/IPE
• Knowledge of IT governance frameworks such as COBIT
• Foundational to intermediate understanding of operating systems, including user access, configuration, and control considerations across environments such as Windows, Unix/Linux, and enterprise platforms
• Understanding of database concepts and controls, including user access, change management, and data integrity considerations across common database platforms (e.g., Oracle, SQL Server, SAP HANA or similar)
• Familiarity with cloud computing environments (e.g., AWS, Azure), including basic concepts of cloud architecture, access management, and shared responsibility models
• Ability to assess risks across applications, operating systems, databases, and cloud environments and understand how these layers interact within the IT control environment
• Familiarity with ERP systems (e.g., SAP) and financial systems environments preferred
• Experience with AuditBoard or similar tools preferred
• Professional certification (e.g., CISA, CIA, CISM, CISSP or equivalent) preferred

Core Skills & Competencies

• Strong analytical and problem-solving skills with attention to detail
• Ability to evaluate data reliability and system-generated information
• Effective written and verbal communication skills
• Ability to manage multiple priorities and meet deadlines
• Strong organizational and documentation skills
• Collaborative mindset with the ability to work effectively in team environments
• Proactive approach with a focus on delivering high-quality work

Education

• Bachelor’s degree in Information Systems, Computer Science, Accounting, Finance, or related field

The hiring range for this position in Glendale, California is $104,800.00 to $128,000.00 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate’s geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.