Senior IT SOX Analyst

JBT Marel•Chicago, IL

10d

About The Position

The Senior IT SOX Analyst supports the global IT SOX compliance program across systems, applications, and business units. The role partners with control owners to support appropriate control design, documentation, and operation, and facilitates quarterly and annual compliance activities, including evidence readiness, control certifications, issue monitoring, and remediation tracking. It also maintains compliance documentation and coordinates with Business Process SOX teams to align IT and business process controls. The role supports periodic IT risk assessments and SOX scoping by analyzing system inventories, business processes, integrations, and financial reporting impacts. It helps assess how organizational changes, acquisitions, and technology transformations affect the SOX program, and documents emerging technology risks and changes to the IT control environment. As an advisor to control owners and stakeholders, the analyst provides guidance on control execution, documentation standards, remediation planning, SOX requirements, and governance practices. The position also supports compliance projects and continuous improvement initiatives, including acquisitions, ERP implementations, system upgrades, reporting dashboards, risk metrics, management reporting, and automated monitoring.

Requirements

2–5 years of experience in IT SOX, IT Audit, SAP Security, IT Risk Management, Internal Controls, or a related discipline.
Working knowledge of SOX 404 requirements and IT General Controls.
Understanding of User Access Management.
Understanding of Segregation of Duties (SoD).
Understanding of Privileged Access Management.
Understanding of Change Management.
Understanding of IT Operations Controls.
Understanding of Automated Controls.
Strong communication and stakeholder management skills.
Strong organizational and project management abilities.

Nice To Haves

Experience working with SAP ECC, SAP S/4HANA, and SAP GRC environments.
Big 4 or large public company experience.
Experience supporting SOX compliance programs within publicly traded companies.
Experience participating in IT risk assessments or SOX scoping activities.
Manufacturing industry experience.
Experience supporting acquisition integrations or ERP transformation programs.
Certifications such as CISA, CPA, CIA, or CRISC, or progress toward certification.

Responsibilities

Support execution of the global IT SOX compliance program across multiple systems, applications, and business units.
Partner with control owners to ensure SOX controls are appropriately designed, documented, and operating effectively.
Facilitate quarterly and annual SOX activities, including evidence readiness, control certifications, issue monitoring, and remediation tracking.
Maintain process narratives, risk and control matrices (RCMs), control inventories, and related compliance documentation.
Monitor compliance deadlines and follow up with stakeholders to ensure timely completion of SOX-related activities.
Coordinate with Business Process SOX teams to align IT and business process controls.
Support annual and quarterly IT risk assessments and SOX scoping exercises.
Analyze system inventories, business processes, integrations, and financial reporting impacts to help identify SOX-relevant systems and risks.
Assist in evaluating the impact of organizational changes, acquisitions, and technology transformations on the SOX compliance program.
Support documentation of emerging technology risks and changes to the IT control environment.
Advise control owners on control execution, documentation standards, and remediation planning.
Educate IT and business stakeholders on SOX requirements, control expectations, and governance practices.
Assist management in assessing control deficiencies and identifying practical remediation solutions.
Support communication between IT SOX, Business Process SOX, Finance, and technology teams.
Support compliance projects, including acquisitions, ERP implementations, system upgrades, and control transformation efforts.
Participate in initiatives to improve compliance processes, stakeholder experience, reporting capabilities, and governance activities.
Assist in developing reporting dashboards, risk metrics, and management reporting for senior leadership.
Support implementation of automated monitoring and continuous improvement opportunities across the control environment.