Title:
Senior IT Internal Controls Analyst
The Senior IT Internal Controls Analyst serves as Information Technology’s primary liaison and coordination point for internal audit, external audit, Finance, controller, risk, compliance, cybersecurity, application owners, infrastructure teams, and third-party service providers. The role supports the design, documentation, testing, monitoring, and continuous improvement of IT controls that enable reliable financial reporting and effective technology governance, with particular emphasis on Sarbanes-Oxley (SOX) systems and business-process support.
This position coordinates audit requests and evidence, evaluates IT general controls and automated/application controls, supports remediation of deficiencies, and embeds control requirements into key system implementations and significant changes. The analyst provides control-focused oversight across the systems development lifecycle (SDLC), including requirements, design, security, data conversion, interfaces, testing, segregation of duties, deployment, and post-implementation stabilization. Experience with ServiceNow and Microsoft Dynamics 365 Finance and Operations (FinOps) and Project Operations (Proj Ops) is preferred.
Responsibilities:
- Serve as the primary IT liaison for Internal Audit, External Audit, Finance, Risk, Compliance, and other stakeholders on IT controls and audit-related activities.
- Coordinate audit planning, walkthroughs, evidence collection, testing requests, and responses to support internal and external audits.
- Support the organization's SOX compliance program across financially relevant systems, applications, and business processes.
- Evaluate and monitor IT General Controls (ITGCs), including user access management, segregation of duties, change management, incident management, and backup/recovery controls.
- Support the design, documentation, testing, and monitoring of automated controls, application controls, and key financial reporting controls.
- Facilitate risk assessments, control reviews, deficiency management, and remediation activities to improve control effectiveness.
- Maintain risk and control documentation, including process narratives, flowcharts, control matrices, and audit-support documentation.
- Provide controls and governance support for system implementations, ERP projects, upgrades, integrations, and digital transformation initiatives throughout the SDLC lifecycle.
- Review project deliverables, security roles, data migration activities, testing results, and deployment readiness from a controls and compliance perspective.
- Develop audit readiness, remediation, and control-performance reporting for management and leadership teams.
- Partner with ServiceNow, Microsoft Dynamics 365, Finance, Cybersecurity, Infrastructure, and Application teams to support technology governance and compliance requirements.
- Identify opportunities to automate controls, standardize processes, improve audit readiness, and strengthen the overall control environment.
Qualifications:
- Bachelor's degree in Information Systems, Computer Science, or a related discipline.
- Minimum 2+ years of experience in IT Audit, IT Internal Controls, SOX Compliance, Technology Risk Management, ERP Controls, or a related field.
- Strong experience supporting internal and external audits, including audit coordination, walkthroughs, evidence collection, and testing activities.
- Hands-on experience with IT General Controls (ITGCs), Automated Controls, Application Controls, Risk Assessments, and Compliance Programs.
- Strong understanding of SOX requirements, financial reporting controls, and technology risks impacting business processes.
- Experience with risk and control documentation, control testing support, deficiency assessment, and remediation validation.
- Practical knowledge of enterprise applications, identity and access management, databases, cloud platforms, integrations, and IT operations.
- Strong understanding of Software Development Lifecycle (SDLC), project governance, testing, release management, and change management processes.
- Experience supporting ERP implementations, cloud migrations, integrations, system upgrades, or major transformation initiatives.
- Knowledge of industry frameworks such as COSO, COBIT, NIST, ISO 27001, ITIL, or equivalent governance frameworks.
- Excellent analytical, problem-solving, documentation, communication, and stakeholder-management skills.
- Ability to manage multiple priorities in a complex global environment while maintaining attention to detail and audit-quality standards.
Preferred Qualifications:
- Experience with ServiceNow ITSM, Governance, Risk & Compliance (GRC), Audit Management, or related modules.
- Experience supporting Microsoft Dynamics 365 Finance & Operations (FinOps) and Project Operations (Proj Ops).
- Knowledge of Segregation of Duties (SoD) analysis, ERP security design, workflow controls, and financial system governance.
- Experience supporting enterprise ERP transformations, cloud-based platforms, and global technology implementations.
- Familiarity with third-party assurance reporting, SOC reports, complementary user entity controls (CUECs), and vendor risk management.
- Experience working within large, global, regulated, engineering, professional services, or multi-provider environments.
- Knowledge of business process controls related to finance, accounting, project management, and reporting processes.
Belong. Connect. Grow. with KBR!
#LI-GD1
