Comp Sftwr Validation Anlyst 3

Ingalls Shipbuilding•Newport News, VA

3d•Hybrid

About The Position

Newport News Shipbuilding is seeking a proactive mid-level IT SOX Compliance Analyst to evaluate IT risks, assess control design, and drive compliance across enterprise applications. In this role, you will act as a primary bridge between IT application owners and our internal and external audit teams. Beyond core SOX testing, you will play a key role in IT general controls (ITGC) remediation and assist in identifying opportunities to automate compliance monitoring and testing workflows. We are looking for a critical thinker who actively asks probing questions, challenges assumptions, and advocates for robust compliance practices while maintaining collaborative relationships across IT operations.

Requirements

Bachelor’s degree in Management Information Systems, Computer Science, Accounting Information Systems, Business Administration, or a related field.
3–5 years of hands-on experience in IT SOX compliance, IT audit, or IT risk management.
Experience with SAP S/4 HANA and related applications
Solid understanding of various IT environments, including Oracle, HANA, SQL, Unix, and Windows Active Directory and related controls
Strong analytical mindset, excellent verbal/written communication, and the confidence to advocate for compliance standards with technical and business stakeholders.
Must Have Bachelor's Degree and 5 years of relevant exempt experience; Master’s Degree and 3 years of relevant professional experience; Ph.D. and 0 years of experience.
One of the following may be used as an equivalent to Bachelor's Degree for Information Technology Related Positions Only: NNS Apprentice School graduate Navy Nuclear Power School (NNPS) graduate Associate's Degree or other formal 2 year program and 2 years of relevant exempt experience or 4 years of relevant non-exempt experience Military Paygrade E-5 or above military experience High School/GED and 4 years combined of Manufacturing, Shipbuilding, Trades, Military experience or other relevant exempt experience High School/GED and 8 years combined of Manufacturing, Shipbuilding, Trades, Military experience or other relevant non-exempt experience
A relevant professional certification can be substituted for a Bachelor's Degree.

Nice To Haves

Professional certifications such as CISA, CRISC, or CIA (or progress toward attainment).
Background in identifying and implementing automated control monitoring or data-driven auditing techniques.

Responsibilities

Plan, execute, and document ITGC and application control testing for critical enterprise systems, with emphasis on SAP and Optro environments.
Serve as the functional point of contact for internal and external audit teams, coordinating data requests, walkthroughs, and status updates to ensure smooth audit execution.
Partner with business and IT application owners to assess risks, clarify control requirements, and translate audit findings into actionable business solutions.
Review evidence critically, ask probing questions during testing, and constructively challenge control owners or audit inquiries when necessary to maintain accuracy and scope discipline.
Work with IT owners to design and implement remediation plans for identified control deficiencies, while identifying opportunities to automate manual controls and compliance testing.
Maintain comprehensive audit workpapers, track deficiency remediation, and provide status reporting to the IT SOX Compliance Manager.