Experienced IT Audit & Compliance Analyst (CPA or CISA)

General Dynamics Electric Boat•Groton, CT

About The Position

The IT Audit & Compliance Analyst joins the Audit & Compliance team, which supports internal and external audit activities, including financial and control reviews conducted by agencies such as DCAA and SUPSHIP, as well as internal and external auditors. The team ensures compliance with federal regulations, GAAP, COSO, SEC requirements, and other applicable standards. It also governs labor-charging practices, validates accounting for capital assets, and oversees the inventory cycle count program. The analyst evaluates the design and operating effectiveness of IT General Controls (ITGCs), information security protocols, and system implementations. The role identifies vulnerabilities, works with business stakeholders on actionable remediation plans, and manages Governance, Risk, and Compliance (GRC) modules within the Oracle ERP finance system. The position also supports special reviews directed by senior or executive management. The role requires a CPA or CISA, a relevant bachelor’s degree, and at least three years of progressive experience in IT auditing, internal controls testing, or information security. The position routinely works across departments and engages with internal and external management, customers, and agencies.

Requirements

Certified Information Systems Auditor (CISA) or Certified Public Accountant (CPA).
Bachelor’s degree in Information Technology, Computer Science, Accounting, or a related field.
At least 3 years of progressive experience in IT auditing, internal controls testing, or information security.
Impeccable professional judgment, advanced critical-thinking ability, and strong verbal and written communication skills to articulate complex risks to non-technical audiences.
Strong organizational and analytical skills.
Ability to multitask, prioritize, and meet multiple deadlines.
High proficiency in Oracle EBS, Excel, Power BI, and Word.
Strong interpersonal skills.
Demonstrated problem-solving and process-improvement capabilities.
Light lifting.

Nice To Haves

Strong understanding of ERP systems such as Oracle and data analysis tools such as SQL, Alteryx, and Power BI.
Experience with GRC software such as SafePaaS or Oracle Application Access Control Governor, Transaction Control Governor, and Change Control Governor.
Prior involvement in SOX or internal auditing activities.
System implementation experience and project management.
Exposure to FAR/DFAR regulatory requirements.

Responsibilities

Ensure IT General Controls compliance with SOX, SOC 1/SOC 2, and internal policies.
Support the company’s Governance, Risk & Compliance program, including overseeing daily operations of SafePaaS GRC modules.
Work with Finance and Supply Chain to promote Oracle changes.
Run Alteryx workflows for custodians, annual Oracle user access reviews, and other required workflows.
Review ServiceNow incidents and requests daily to ensure finance-related Oracle user access requests are processed.
Conduct monthly manual journal entry reviews to ensure segregation of duties.
Oversee and monitor DCAA’s access to EB Systems.
Support testing of EB Finance Oracle responsibilities following Oracle upgrades or enhancements.
Develop and run data analytics scripts.
Collaborate with DCAA, SUPSHIP, and other agencies as required.
Support SUPSHIP and DCAA business system access requests.
Support the department’s annual overhead audit.
Work routinely with multiple departments and functions across the organization.
Engage professionally with all levels of internal and external management and customers.
Support Supervisors, Senior Managers, the Controller, VP Finance, and the CFO as needed.
Support SOX audits and internal audits when required.
Conduct special reviews at the direction of senior or executive management.