Job Title: IT Security Analyst (IT Audit)
Length: 6 months
Pay Rate: $45–65/HR
Work Model: Hybrid
Overview: We are seeking an experienced IT Security Analyst with a strong IT Audit and SOX background to provide support across IT audit, compliance, and internal controls. This role will support ongoing audit activities, assist with the review and completion of audit findings, and work closely with system owners and business stakeholders to gather evidence, perform data reviews, and ensure controls are operating effectively. The ideal candidate will be able to hit the ground running, manage multiple priorities, and work independently while partnering closely with internal audit, IT, security, and business teams.
Key Responsibilities:
- Support IT audit activities and SOX compliance initiatives
- Assist with IT General Controls (ITGC) testing and documentation
- Gather, review, and validate audit evidence
- Perform data reviews and follow up with system owners
- Identify, document, and track audit findings through completion
- Support access management, change management, and backup/restore controls
- Review third-party audit reports, including SOC reports
- Partner with internal and external auditors as needed
- Assist with ongoing and new audit projects
- Help ensure controls meet compliance and operational requirements
Required Qualifications:
- 3+ years of IT Security, IT Audit, or related experience; 5+ years preferred
- Hands-on experience with SOX controls and ITGCs
- Strong understanding of IT audit processes and control frameworks
- Experience with access management, change management, and other IT controls
- Strong documentation and analytical skills
- Ability to work with auditors, system owners, and cross-functional teams
- Strong communication and follow-through skills
Preferred Qualifications:
- SAP controls experience
- SAP GRC experience
- SAP ITGC experience
- Experience with access provisioning and deprovisioning controls
- Experience with Segregation of Duties (SoD) controls and SoD reviews
- User Access Review (UAR) experience
- SOC report review experience
- CISA certification
Top Skills:
- SOX / ITGC
- IT Audit
- SAP Controls
- SAP GRC
- Access Management
- Segregation of Duties (SoD)
- User Access Reviews (UARs)
