Senior IT SOX Analyst

JBT Marel•Chicago, IL

About The Position

The Senior IT SOX Analyst supports the global IT SOX compliance program across multiple systems, applications, and business units. The role partners with control owners and stakeholders to help ensure controls are appropriately designed, documented, and operating effectively, and supports risk assessment, scoping, compliance activities, remediation, and continuous improvement. It also works with Business Process SOX, Finance, and technology teams and contributes to projects such as acquisitions, ERP implementations, system upgrades, and control transformation efforts.

Requirements

2–5 years of experience in IT SOX, IT Audit, SAP Security, IT Risk Management, Internal Controls, or a related discipline.
Working knowledge of SOX 404 requirements and IT General Controls.
Understanding of User Access Management, Segregation of Duties (SoD), Privileged Access Management, Change Management, IT Operations Controls, and Automated Controls.
Strong communication and stakeholder management skills.
Strong organizational and project management abilities.

Nice To Haves

Experience working within SAP ECC, SAP S/4HANA, and SAP GRC environments.
Big 4 or large public company experience.
Experience supporting SOX compliance programs within publicly traded companies.
Experience participating in IT risk assessments or SOX scoping activities.
Manufacturing industry experience.
Experience supporting acquisition integrations or ERP transformation programs.
Certifications such as CISA, CPA, CIA, or CRISC, or progress toward certification.

Responsibilities

Support execution of the global IT SOX compliance program across systems, applications, and business units.
Partner with control owners to ensure SOX controls are appropriately designed, documented, and operating effectively.
Facilitate quarterly and annual SOX compliance activities, including evidence readiness, control certifications, issue monitoring, and remediation tracking.
Maintain process narratives, risk and control matrices (RCMs), control inventories, and related compliance documentation.
Monitor compliance deadlines and follow up with stakeholders to ensure timely completion of SOX-related activities.
Coordinate with Business Process SOX teams to align IT and business process controls.
Support annual and quarterly IT risk assessments and SOX scoping exercises.
Analyze system inventories, business processes, integrations, and financial reporting impacts to help identify SOX-relevant systems and risks.
Assist in evaluating the impacts of organizational changes, acquisitions, and technology transformations on the SOX compliance program.
Support documentation of emerging technology risks and changes to the IT control environment.
Advise control owners on control execution, documentation standards, and remediation planning.
Educate IT and business stakeholders on SOX requirements, control expectations, and governance practices.
Assist management in assessing control deficiencies and identifying practical remediation solutions.
Support communication among IT SOX, Business Process SOX, Finance, and technology teams.
Support compliance-related projects, including acquisitions, ERP implementations, system upgrades, and control transformation efforts.
Participate in initiatives to improve compliance processes, stakeholder experience, reporting capabilities, and governance activities.
Assist in developing reporting dashboards, risk metrics, and management reporting for senior leadership.
Support implementation of automated monitoring and continuous improvement opportunities across the control environment.