IT SOX Controls Tester

Description

The company is a global technology company that moves and manages money across borders. The Security Controls team tests, assesses and improves technology controls across the company's IT landscape.

The role suits someone who has tested controls in a cloud-native environment, not only in legacy IT systems.

Responsibilities

• Test design and operating effectiveness for access management, change management and IT application controls across cloud infrastructure and SaaS tools.
• Work with finance, risk, security and platform stakeholders to explain SOX 404 requirements and what they expect.
• Help control owners strengthen their risk and control environment.
• Use data analytics and automation to assess control design and operating effectiveness.
• Keep testing documentation to a high standard and confirm that testing methods meet SOX 404 requirements.

Requirements

• You have deep knowledge of SOX 404, the COSO framework and IT control frameworks such as NIST and ISO 27001, and you understand how these map to dynamic infrastructure.
• You have 3+ years of experience in technology risk or IT audit, with a clear focus on SOX.
• You have hands-on experience with first-time SOX audits in cloud-native environments.
• You understand how change management works in a CI/CD pipeline and how access management works in a microservices architecture.
• Preferred: experience with AWS, Terraform, GitHub, Jira, Okta and SailPoint.
• You want to modernise testing methods, using data analytics and automation to rely less on manual work and widen control coverage.
• You work well across functions, explaining complex control findings to engineers and complex technical risks to finance stakeholders.

Conditions

The company is an international team, and the posting does not state a work location, schedule or contract type.

The company welcomes applicants from all backgrounds and treats equal opportunity as a core value.