Sr. IT SOX Compliance Analyst

GROW WITH US:  

Tandem Diabetes Care creates new possibilities for people living with diabetes, their loved ones, and their healthcare providers through a positively different experience. We’d love for you to team up with us to “innovate every day,” put “people first,” and take the “no-shortcuts” approach that has propelled us to become a leader in the diabetes technology industry.

STAY AWESOME:

Tandem Diabetes Care is proud to manufacture and sell the Tandem Mobi system and t:slim X2 insulin pump with Control  -IQ technology — an advanced predictive algorithm that automates insulin delivery.

But we’re so much more than that. Our company’s human-centered approach to design, development, and support delivers innovative products and services for people who use insulin. Because many of our own team members live with type 1 diabetes, or have a loved one impacted by diabetes, the work is personal, and we are committed to the cause. Learn more at https://www.tandemdiabetes.com/

WHEN & WHERE YOU’LL WORK:

This position is fully remote and open to candidates within the United States. Equipment for the role will be provided and training will occur virtually. 

A DAY IN THE LIFE:

Responsible for companywide testing and reporting of SOX compliance deliverables, as well as supporting strategic improvements and changes to SOX compliance programming. This position will lead the ongoing processes related to the company’s scoping and risk assessment of controls over financial reporting, including identification of key controls, maintenance of the risk assessment process, maintenance of process documentation, independent testing of controls, and assessment/evaluation and reporting of deficiencies, including summary reporting of SOX testing status to the executive team on at least a quarterly basis. Finally, this position will work with control owners to remediate controls that fail controls testing through the use of remediation templates approved by management. This position may also be asked to assist with other special projects as needed, including but not limited to management and external reporting support.

Sr. IT SOX Compliance Analyst I's at Tandem are also responsible for:

• Aid in performing and maintaining IT risk assessments and risk assessment documentation,
• Identifying and maintaining documentation of key IT general controls (ITGCs) (narratives, process flows, data flows, etc.).
• Lead ITGC walk-throughs with internal and external stakeholders to assess control design effectiveness and maintain walk-through documentation on a regular basis.
• Coordinate and perform ITGC testing of existing controls over financial reporting to assess control operation effectiveness, including interfaces, key reports, UARs, change monitoring, configuration changes, etc.
• Design and lead IT SOX trainings for new/ existing staff and process owners, including trainings within the SOX module of AuditBoard as needed for new control owners.
• Help in creating control templates for control owners to aid in effective documentation of their controls.
• Drive the remediation process of failed control tests by working directly with the control owners, utilizing the remediation template approved by management.
• Aid in the quarterly reporting of findings and results of the ITGC SOX program to executive management and the Audit Committee, as needed.
• Champion internal controls, process improvement and corporate governance concepts throughout the business.
• Provide assistance with special projects on an as-needed basis, including but not limited to those related to other IT compliance and reporting, ERP implementations/system and hardware upgrades, SEC Reporting, management reporting, cyber security audits, and process improvement initiatives.
• Aid in the system administration of AuditBoard (control maintenance, user maintenance, workstream creation, etc.).
• Ensures compliance with company policies, including Privacy/HIPAA, and other legal and regulatory requirements.

WHAT YOU’LL NEED:

• Proficient in MS Office (Excel, Word, Powerpoint, etc.).
• Experience with and understanding of the following concepts: Sarbanes-Oxley Section 404B, COBIT 5, SSAE18 (SOC1 Type2), ITGCs over Financial Reporting and COSO standards.
• Experience auditing enterprise and web applications, cybersecurity practices, privacy, and various infrastructure platforms such as Microsoft Dynamics, Windows, SQL Server, Bitbucket, and job scheduler tools.
• Strong analytical and problem-solving skills required in proposing solutions to and resolving issues that arise on a day-to-day basis.