IT SOX Internal Controls Analyst

Purpose of Job

 

The IT SOX Internal Controls Analyst is a role within Owens Corning’s Global Finance, Operations & Reporting (GFOR) organization responsible for supporting internal controls awareness, knowledge, and compliance throughout the Company. This role will interact with stakeholders throughout the organization, Global Information Systems (“GIS”), external auditors, and internal auditors. This role will be tasked to support and implement approaches based on Information Technology General Controls (“ITGC”), IT dependencies, and Information Produced by the Entity (“IPE”) best practices. 

 

The position is suited to driven, curious individuals who are able to work with some oversight and support mid – large size projects.  Qualified candidates will have a minimum of 1 year of IT auditing experience, preferably in multi-national corporations, and public accounting experience is strongly preferred. Candidates should possess excellent communication and analytical skills and must demonstrate the ability to be successful in a fast-paced and dynamic, team-oriented environment.

 

This position reports to the IT SOX Internal Controls Analyst.

 

Job Responsibilities

 

Supports the annual in-scope applications assessment for the Sarbanes-Oxley (“SOX”) management testing scoping memo.

• Performs design and operating effectiveness testing for SOX IT General Controls (ITGC) with oversight.
• Completes detailed and quality work-papers that includes corroborative evidence to support management testing conclusions within the expected deadlines.
• Applies feedback or review comments from submitted work-papers and demonstrates continuous improvement in their documentation or testing.
• Communicates testing status and conclusions.
• Conducts ITGC walkthrough meetings (access security, IT operations, and change management) with control owners to understand the processes and gather evidence with support.
• Assists with key reports testing, critical spreadsheet testing, IPE governance, and special projects/assignments.

 

Supports IT internal control awareness, knowledge, compliance, and excellence to support operational and financial risk mitigation:

• Maintains strong relationships with GIS to ensure changes to the internal controls properly mitigate risks in an efficient manner
• Maintains stakeholders’ expectations while holding an independent view.
• Continuously accepts coaching in learning key management testing processes/testing framework/methodology.
• Provides information or facts to assist in drafting and communicating control deficiencies.
• Supports leader in partnering with GIS and owners of Service Organizations to implement ITGC’s, Complementary User Entity Controls, IPE best practices, and supports the assessment of SOC 1 Type II reports.

 

 

 

 

 

 

Job Requirements

 

Experience:

• Bachelor's Degree (Information Management, MIS, Computer Science, Finance, Accounting or related combinations or degrees with business and technical mix).
• 1-3 years of relevant work experience; preferably with a public accounting firm, consulting audit firm, or internal audit.
• Minimum of 1 year of experience auditing information technology control processes
• Pursuing or has obtained professional certifications (CISA, CPA, or CIA preferred).
• Big-four audit experience strongly preferred.

 

Knowledge, Skills and Abilities:

• Understanding of SOX.
• Understanding of IT risk and general information security concepts and technology infrastructure.
• Understanding of core IT general control processes (e.g., Information Security, Change Management, Software Development Lifecycle, IT Operations etc.).
• Knowledge of technical platforms, networks, security concepts, and data retrieval techniques.
• Experience in auditing/testing SAP is a plus.
• Proficiency in Microsoft Office: Excel, PowerBI, Visio, Word, PowerPoint, and Outlook.
• Dedication to ethical behavior and the ability to maintain objectivity.

 

Personal Characteristics: