Information Security Analyst

Apple•Cupertino, CA

8h•Onsite

About The Position

Lead IT SOX Audit and financial audit day-to-day audit tasks, including interacting with auditors and collecting necessary IT evidence. Interpret large sets of customer and transactional data set, lead meetings with IT cross-functional IT engineering team, collaborate with engineers and communicate issues to various stakeholders, providing feedback and challenge auditor issues. Investigate and understand Apple Services systems and processes for SOX. Meet Direct Responsible Individuals throughout Apple Services Engineering (ASE) to gain understanding of Apple Services to assist in writing SOX narratives, identify key IT controls, and develop testing procedures for key internal IT controls. Gain technical understanding of ASE systems through evaluating and defining IT general controls. Work collaboratively with BAC and the ASE SOX Program Manager to finalize controls and procedures for IT controls to minimize and address significant IT financial risks that prevent Millions of dollars in frauds. Perform SOX testing for the gift card business. Manage user access to internal system that is the core business for Apple Customer Support retail team members as well as internal employees, contractors, and vendor for the entire Apple Services business. Perform User Access Review, creating user reports and analytics as well as distributing lists to be reviewed and following up to ensure it’s completed by different role approvers, to ensure privacy as well as authorized access to sensitive internal system and customer PII information.

Requirements

Bachelor’s degree or foreign equivalent in Business Administration or a related field and 2 years of experience in the job offered or related occupation.
2 years of experience with Working understanding of Sarbanes Oxley requirements, including risk and control design and operating effectiveness testing.
2 years of experience with Understanding and communicating the “audit language” with both external and internal parties.
2 years of experience with Performing risk assessments and audits of Information Technology General Controls that apply to all systems, components, processes and data ensuring the physical & environmental security, software implementation, logical security, backup and recovery, incident management, computing infrastructure and information/data security.
2 years of experience with Reading and understanding programming language including Java and C++ while navigating software repositories including GitHub.
2 years of experience with Applying data scientist skills including utilizing SQL for data mining, writing queries for audit requests and providing business insights on mined data.
2 years of experience with Utilizing Excel and Tableau for ad hoc analysis and reporting.
2 years of experience with Leading collaborations between IT and Business stakeholders to implement contractual and regulatory requirements for customer facing and internal corporate systems.
2 years of experience with Developing business process solutions within high tech industry with a focus on minimizing corporate risks.
2 years of experience with Understanding and translating contractual language and implementing business process and technological requirements.
2 years of experience with Utilizing knowledge of financial accounting systems, including financial configuration, as well as a working knowledge of financial transactions, profit and loss, and balance statement reporting.

Responsibilities

Lead IT SOX Audit and financial audit day-to-day audit tasks, including interacting with auditors and collecting necessary IT evidence.
Interpret large sets of customer and transactional data set, lead meetings with IT cross-functional IT engineering team, collaborate with engineers and communicate issues to various stakeholders, providing feedback and challenge auditor issues.
Investigate and understand Apple Services systems and processes for SOX.
Meet Direct Responsible Individuals throughout Apple Services Engineering (ASE) to gain understanding of Apple Services to assist in writing SOX narratives, identify key IT controls, and develop testing procedures for key internal IT controls.
Gain technical understanding of ASE systems through evaluating and defining IT general controls.
Work collaboratively with BAC and the ASE SOX Program Manager to finalize controls and procedures for IT controls to minimize and address significant IT financial risks that prevent Millions of dollars in frauds.
Perform SOX testing for the gift card business.
Manage user access to internal system that is the core business for Apple Customer Support retail team members as well as internal employees, contractors, and vendor for the entire Apple Services business.
Perform User Access Review, creating user reports and analytics as well as distributing lists to be reviewed and following up to ensure it’s completed by different role approvers, to ensure privacy as well as authorized access to sensitive internal system and customer PII information.