Financial Control Analyst - IT General Controls Testing

About this role:

Wells Fargo is seeking a Financial Controls Analyst within the Enterprise COSO testing team.

The Enterprise Finance function contains the Corporate Controllers division, which includes the Enterprise Controls & Oversight (EC&O) group. The Enterprise COSO testing team is a component of EC&O. Enterprise COSO testing professionals will have enterprise-wide exposure to key stakeholders within the external financial/risk/regulatory reporting infrastructure. 

The Enterprise COSO testing team supports the Company’s on-going objective of maintaining an industry-leading information technology control environment and is responsible for the following directives:

• Providing meaningful assessments of IT General Controls (ITGCs) covering applications that support financial, risk, and regulatory reporting.

• Assessing compliance with Well Fargo & Company’s COSO based policies for IT controls impacted by internal controls over financial reporting (SEC and Regulatory Reporting) and strategic planning for on-going IT control compliance with COSO policies (proactive anticipation of internal control related matters).

• Monitoring new and emerging internal control related guidance and issues and assist with facilitating group-wide training to interested and impacted stakeholders.

• Providing consultation and subject matter expertise for process and IT control related matters including evaluating severity of control deficiencies and related remediation efforts.

• Providing process and control support and thought leadership for projects.

• Interfacing with external auditors, regulators and others on control related matters and,

• Acting as a change agent for continual improvement of the control environment.

In this role, you will:

• Partner with IT/LOB Process Owners/Control Owners to document significant in-scope processes (both process narratives and process flow diagrams).  Additionally, assessing the appropriateness and completeness of key risk and key controls identified.

• Perform the following IT General Control (ITGC) testing in the access to programs and data, change management, computer operations, and systems development lifecycle domains:

  • Perform walkthroughs of significant technology processes and ensure required COSO documentation is accurate and reflects relevant risk and key controls.

  • Validate and provide credible challenge to identified shared services, third party service providers, and significant applications.

  • Perform COSO testing of key ITGCs, including design effectiveness assessments and operating effectiveness testing.

• Validate and challenge documentation of control deficiencies, including issue description, root cause, unmitigated impact, and corrective actions

• Analyze the severity of control deficiencies and their impact to internal control over financial reporting

• Validate remediation of issues through assessment of the corrective actions performed

• Build relationships and collaborate with key stakeholders in the technology functions related to assigned process areas.

• Assist with projects impacting the team, including identification of risks and consulting on controls for newly implemented processes and applications

• Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals

• Communicate and provide consultation regularly with stakeholders throughout the enterprise

• Provide oversight for testing and monitoring involving moderate to complex subject matter or control areas

• Consult with the line of business and enterprise functions on financial reporting or information technology governance, and controls and oversight matters

• Identify compliance and risk management requirements for supported area

Required Qualifications:

• 2+ years of Finance, Accounting, Analytics, Reporting or Business and Technology Audit experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired Qualifications:

• Internal controls testing experience including business process automated controls, and/or IT General Controls (ITGC)

• Experience identifying ITGCs and developing, executing test plans, and documenting testing for ITGCs across the access to programs and data, change management, computer operations, and system development lifecycle (SDLC) domains

• Experience partnering with financial and IT audit teams on integrated audits

• Experie