Job Description
Description:
* Facilitate the User Access Review (UAR) process. The UAR process is an IT SOX control requirement to ensure that users have appropriate application and platform access.
* Assist with the IT SOX process and serves as a liaison with internal audit, external audit, and IT contacts.
* Plan, execute, and facilitate annual, semi-annual, and quarterly UAR's for in-scope IT SOX applications, platforms, and tools.
* Work with IT and Business management to ensure reviews are appropriately executed, documented, and completed.
* Ensures that UAR's and supporting documentation are complete, accurate, and finalized timely. This includes collecting user access listings, ensuring IT and business management respond to the reviews, and confirming access is appropriately updated.
* Support IT activities associated with the annual SOX audit. Collaborate with control and process owners to develop and implement corrective actions to address identified control deficiencies.
* Assist internal audit and external audit with requested information and facilitate the gathering of requests, as needed, with IT control and process owners.
* Provide periodic status reports as requested for areas of responsibility.
* Assist with other assigned IT security initiatives.
Required Skills & Experience
Must Have's:
* 3-5+ years of IT SOX, audit, or relevant compliance experience.
* User Certification Campaigns in the Sailpoint IGA solution.
o Experience with User Access Reviews -- not just auditing but facilitating and performing reviews
* Knowledge of, and experience with, current IT frameworks (e.g., NIST, SOX, ITIL).
o Experience with IT General Controls for SOX and processes will be a plus.
* Some knowledge of IT compliance related processes is desired.
* Related certifications preferred (e.g., CISA, CISSP, etc.).
Plusses:
* Doesn't have to be a security expert but understands processes and controls
* Well-versed in Excel
o Managing data with excel
Benefit packages for this role will start on the 31st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.