Sr. IT SOX Associate

Today, there's more data and users outside the enterprise than inside, causing the network perimeter as we know it to dissolve. We realized a new perimeter was needed, one that is built in the cloud and follows and protects data wherever it goes, so we started Netskope to redefine Cloud, Network and Data Security. 

We are seeking a detail-oriented IT SOX Analyst/Auditor to support the execution and continuous improvement of our IT SOX compliance program. In this role, you will work closely with the Senior IT SOX Manager to help define the scope of IT controls, design and test control effectiveness, and ensure compliance with SOX requirements across in-scope systems and applications.

You will play a key role in documenting processes, performing control testing, identifying control gaps, and supporting remediation efforts while maintaining high-quality audit documentation. The ideal candidate has strong knowledge of IT General Controls (ITGC), risk and control frameworks, and experience participating in the full SOX compliance lifecycle in a dynamic, fast-paced environment.

• →Work closely with Sr IT SOX Manager and assist with IT SOX scoping, designing IT controls for inscope SOX applications, testing the controls for design and operating effectiveness and ensuring segregation of duties
  Document Key reports test methodology, prepare test plans and execute controls testing
• →For all assigned controls, schedule and attend walkthroughs to develop a deeper understanding of Company’s IT systems/applications and how they support Business Processes, test, and document the results based on IA methodology.
• →Ensure quality of SOX deliverables
• →Escalate all identified gaps/control deficiencies to the Sr IT SOX Manager. Document the proposed remediation action plan, align with control owners on the remediation
  plan and track for remediation.
• →SOX program status tracking and reporting

• At least 3-5 years of experience in IT audit, IT SOX compliance, or a related field.
• Bachelor's degree in Information Systems, Accounting, Finance, Computer Science, or a related field. CPA, CISA is a plus.
• In-depth knowledge of IT general controls and related scoping and testing skill set, including the following control areas:
  • Access management
  • Change management,
  • IT operations,
  • System development life cycle (SDLC),
  • Third-party SOC reports,
  • System interface controls,
• Key report / IPE validation testing.
• Familiarity with risk and control frameworks (e.g., COSO, COBIT)
• Experience participating in the annual SOX compliance cycle, including process walkthroughs, control testing, workpaper quality assurance, control remediation and
  certification processes.
• Self-starter/Independent- shows initiative and works responsibly even without close supervision and quick learner.