Senior IT Analyst/Auditor, Internal Controls & SOX (HYBRID, 3 Days in Palo Alto Office)

Company Description

Guardant Health is a leading precision oncology company focused on helping conquer cancer globally through use of its proprietary tests, vast data sets and advanced analytics. The Guardant Health oncology platform leverages capabilities to drive commercial adoption, improve patient clinical outcomes and lower healthcare costs across all stages of the cancer care continuum. Guardant Health has commercially launched Guardant360®, Guardant360 CDx, Guardant360 TissueNext™, Guardant360 Response™, and GuardantOMNI® tests for advanced stage cancer patients, and Guardant Reveal™ for early-stage cancer patients. The Guardant Health screening portfolio, including the Shield™ test, aims to address the needs of individuals eligible for cancer screening.

Job Description

Guardant Health is looking for IT Senior Auditor/Analyst, Internal Controls & SOX, to join our Global Internal Controls Team. If you are intellectually curious, view challenges as learning opportunities, want to experience the transformative world of global internal controls, and enjoy working with people, we'd love to speak with you!  

You're excited about this opportunity because you will… 

• Lead the team in internal controls and IT SOX related activities (ITGCs & ITACs) between the company and external audit. 

• Manage and collaborate with process and control owners and external auditors and advisory partners on various matters including planning activities, walkthrough participation, evidence (PBC) requests, information sharing, and status updates. 

• Lead all SOX testing for Information Technology (IT) controls for in-scope applications, operating systems and databases including security, change management and infrastructure controls, key reports, data analytics and operational reviews. 

• Perform internal controls reviews and risk assessments for IT environment and systems. 

• Lead efforts related to quarterly management certifications (user access, change management, monitoring activities and reporting) 

• Own the process for dataflows and narratives for all IT and application controls on a quarterly basis. 

• Assist in updating and maintaining company-wide internal control standards and provide controls-related training to process owners. 

• Responsible for third-party SSAE 18 (SOC) reports. 

• Take point in researching and documenting ITGC & ITAC internal control issues and tracking remediation to conclusion. 

• Perform assessments for SOX impact of new initiatives, including system implementations (SDLCs), and special projects. 

• Responsible for the upkeep of SOX GRC application with real-time updates and appropriate visibility and access by stakeholders. 

• Work cross-functionally with Finance, IT, and Operations groups building key relationships, enhancing collaboration, and developing knowledge and expertise in multiple areas, as there is tremendous potential for growth, as we expand. 

Qualifications

We're excited about you because you have… 

• Bachelor’s degree in information systems or a relevant field. 

• A minimum of 4 years’ experience in information technology, audit, SOX Compliance, applications, information security, networks, and infrastructure. 

• Solid understanding of internal controls over financial reporting (ICFR), IT Governance, Risk & Controls, COSO, Cobit, NIST & InfoSEC. 

• Operational and/or audit experience with technologies such as ERPs (Oracle/SAP), data visualization tools, cloud technologies, and GRC tool. 

• Professional Certification is preferred (CISA, CISSP, SSCP, CIA, or equivalent). 

• Demonstrated proficiency of information technology auditing control disciplines including a solid foundation in security and one or more pertinent areas of technical specialization (application development, change management, or operations). 

• Good communication and interpersonal skills, and a willingness to learn. 

• Above all else, you are bright, personable, and motivated by new experiences and challenges! 

Nice to Have… 

• Life Science /Healthcare industry experience. 

• Strong personal integrity with the highest ethical standards. 

• Organized, solid attention to detail, and ability to re-prioritize in a fluid environment. 

Why Guardant Health? 

• As a member of the Guardant Health Global Internal Controls team, you will have lots of opportunities working with collective teams of bright, personable, and motivated by challenge individuals. You are encouraged to be your authentic self here and lead by example.