Senior Analyst, IT Internal Controls & SOX Compliance

Circle Internet Financial•San Francisco, CA

1d•Remote

About The Position

Circle is looking for an experienced Senior Analyst, IT Internal Controls & SOX Compliance to join the Internal Controls and Compliance team. Reporting to the Senior Manager, IT Internal Controls, this individual will play a key role in supporting and enhancing Circle's IT SOX compliance program and overall internal controls environment. This role will be responsible for evaluating the design and operating effectiveness of IT General Controls (ITGCs), automated controls, and IT-dependent manual controls across critical business systems and processes. The Senior Analyst will partner closely with Engineering, Security, Finance, Compliance, and business stakeholders to ensure controls are effectively designed, documented, tested, and monitored to support regulatory and financial reporting requirements.

Requirements

4+ years of Big 4 experience in IT Audit, IT SOX Compliance, Internal Controls, Risk Advisory, or related fields.
Bachelor's degree in Accounting, Information Systems, Computer Science, Business, or a related discipline.
CPA, CISA, CIA, CISSP, or equivalent certification required.
Strong knowledge of SOX 404 requirements, PCAOB standards, COSO framework, and IT General Controls (ITGCs).
Proven experience designing, implementing, and managing ITGC and SOX compliance programs, ideally in a pre-IPO and/or newly public high-growth technology company environment.
Experience testing and evaluating ITGCs, automated controls, IT-dependent manual controls, and key reports used in financial reporting processes.
Strong understanding of cloud environments, SaaS applications, identity and access management, SDLC processes, and cybersecurity controls.
Experience with ERP systems, financial applications, and GRC platforms.
Ability to assess risks associated with AI-enabled processes and technologies, including governance, data quality, security, regulatory, and financial reporting considerations, and recommend appropriate controls and oversight mechanisms.
Strong analytical, organizational, and problem-solving skills with exceptional attention to detail.
Excellent verbal and written communication skills, including the ability to communicate effectively with both technical and non-technical stakeholders.
Ability to evaluate business and technology processes, identify and articulate risks, and identify practical, scalable control solutions.
Proven ability to manage multiple priorities, meet deadlines, and operate effectively in a fast-paced environment.
High integrity and ability to handle confidential and sensitive information.
Experience/familiarity with Slack, Apple MacOS, Google Workspace, and audit/compliance management tools.
Experience leveraging artificial intelligence (AI) tools and technologies to improve business processes, including the development, implementation, or use of AI-enabled solutions, agents, automations, or productivity tools.

Nice To Haves

Experience working in a high-growth technology, fintech, payments, crypto, or financial services environment.
Experience related to SOC reporting oversight, and issuance responsibilities
Strong understanding of SOC1, SOC2, and SOC3 reporting requirements and frameworks.

Responsibilities

Supporting the execution and continuous improvement of Circle's IT SOX compliance program, including annual planning, risk assessment, control documentation, testing coordination, and remediation tracking.
Supporting and creating SOX ready documentation including narratives, flow charts, control descriptions, etc.
Developing and leading control procedure documentation and assess controls changed and/or consolidated as a result of different system implementations
Leading conversations, understanding both IT and Business processes and controls and the relationship between the two.
Designing and reviewing system implementation, data conversion, or data migration control controls (SDLC).
Conducting periodic reviews to ensure application controls and Segregation of Duties (SOD) are configured across the company's systems.
Working in tandem with the internal audit group to design testing programs to ensure appropriate SOX assertions can be made.
Supporting evaluation of third-party service providers for SOC reports.
Reviewing and designing appropriate internal controls for completeness and accuracy of reports and IPE.
Project managing control design for new products, processes and system implementation launches and ensuring appropriate internal controls are in place prior to launch.
Managing the Audit Board internal controls repository.
Reviewing, assessing, and evaluating reported control deficiencies, root causes, and planned corrective actions in conjunction with IT and business process owners.
Working with internal and external auditors to coordinate IT General Controls and automated controls testing, and process walkthroughs to streamline impact on the business and align test results and yield efficiencies.
Working closely with the IT, Security, Engineering, Data and Compliance teams to ensure IT General Control documentation and monitoring programs are consistent with SOX requirements.
Preparing materials and SOX compliance findings and assertions for Leadership and Audit Committee meetings.
Contributing to the ongoing maturation of the Internal Controls program through optimization, standardization, and automation initiatives.
Supporting special projects and ad hoc risk and compliance assessments as needed.