Senior IT Analyst, Internal Controls Governance

Company

Cox Automotive - USA

Job Family Group

Information Technology

Job Profile

IT Audit Sr Analyst

Management Level

Individual Contributor

Flexible Work Option

Hybrid - Ability to work remotely part of the week

Travel %

Yes, 5% of the time

Work Shift

Day

Compensation

Compensation includes a base salary of $87,200.00 - $130,800.00. The base salary may vary within the anticipated base pay range based on factors such as the ultimate location of the position and the selected candidate’s knowledge, skills, and abilities. Position may be eligible for additional compensation that may include an incentive program.

Job Description

Cox Automotive is seeking a Senior IT Analyst, Internal Controls Governance to assess and monitor technology risks to the company’s operations and financial statements. This individual would be responsible for gathering assurance and evidence that identified risks are appropriately defined and mitigating controls are designed and operating effectively. The ideal candidate will coordinate with other risk related groups (i.e. Information Security, Technology, etc) to ensure accuracy of financial statements and compliance with regulatory requirements and drive business ownership of internal controls.

Primary Responsibilities and Essential Functions

• Identify, document, assess and monitor key technology controls supporting the financial environment.
• Maintain and prepare detailed and accurate documentation, including system descriptions, control descriptions, risk and control matrices, process flowcharts, and management responses and remediation.
• Assess and respond to control design certification changes by updating internal controls documentation, addressing remediation needs, and collaborating with business cycle and process owners to implement effective solutions.
• Conduct walkthroughs of processes and internal controls to effectively identify and validate key control activities.
• Partner with the Audit team to ensure the operating effectiveness of key control activities.
• Define and identify control gaps and provide recommendations (remediation/mitigation) for control process improvements.
• Partner with the Information Security team to facilitate the Service Organization Control (SOC) audits and the report issuance   
• Monitor task status in Auditboard (governance and risk tool) related to the design and operational effectiveness of key controls.
• Effectively communicate results of activities in an accurate and concise manner verbally and in writing.
• Lead and/or participate on multiple ad-hoc projects (i.e. system implementations, risk-based projects) and tasks, ensuring each engagement is conducted efficiently and effectively.

Qualifications:

Minimum:

• Bachelor’s degree in a related discipline and 4 years’ experience in external audit, internal audit, SOX compliance or a related field.
  • The right candidate could also have a different combination, such as a master’s degree and 2 years’ experience; a Ph.D. and up to 1 year of experience; or 8 years’ experience in  external audit, internal audit, SOX compliance or a related field
• Experience documenting and evaluating IT general controls (ITGCs), application controls, and automated business process controls.
• Experience using governance, risk, and compliance (GRC) platforms such as AuditBoard, or similar tools.
• Experience with Microsoft Office Suite, including Word, Excel (e.g., pivot tables, VLOOKUP), PowerPoint, and Visio (or equivalent process mapping tools).
• Experience conducting control walkthroughs, preparing risk and control matrices, and drafting process documentation such as narratives and flowcharts.
• Experience supporting or coordinating SOC 1 or SOC 2 audits, including evidence collection and control testing.
• Experience working cross-functionally with IT, security, and business stakeholders to assess and remediate control deficiencies.

Preferred:

• CISA or CIA certification preferred
• Working knowledge of Oracle and Auditboard preferred
• Experience navigating and leveraging ServiceNow and FastPath a plus
• Automotive industry experience preferred

Drug Testing

To be employed in this role, you’ll need to clear a pre-employment drug test. Cox Automotive does not currently administer a pre-employment drug test for marijuana for this position. However, we are a drug-free workplace, so the possession, use or being under the influence of drugs illegal under federal or state law during work hours, on company property and/or in company vehic