Senior Business Analyst SOX Controls

Job Summary

We are seeking a highly experienced Senior Business Analyst – SOX Controls with deep expertise in Sarbanes‑Oxley (SOX) compliance and IT General Controls (ITGC). The ideal candidate will partner closely with Business and IT stakeholders to design, document, and implement effective internal controls
, including Segregation of Duties (SoD) requirements. This role requires hands‑on experience leveraging industry‑standard SOX frameworks, best practices, and reusable templates to ensure audit readiness and regulatory compliance.

• Partner with Business and IT teams to design, document, and implement SOX‑compliant internal controls
  .

• Draft and maintain clear, effective control descriptions
  , including control objectives, risk statements, and testing procedures.

• Develop and document Segregation of Duties (SoD) requirements aligned with business processes and system roles.

• Perform SOX risk assessments to identify control gaps and remediation opportunities.

• Support IT General Controls (ITGC) across access management, change management, and computer operations.

• Create and maintain standardized SOX documentation
  , leveraging proven templates and best‑practice frameworks.

• Coordinate with internal audit, external auditors, and compliance teams during SOX testing and audits
  .

• Ensure controls are properly mapped to business processes, applications, and financial reporting risks.

• Assist in remediation planning and execution for control deficiencies.

• Maintain audit‑ready documentation and evidence repositories.

• 8+ years of experience as a Business Analyst or Compliance Analyst with strong focus on SOX controls
  .

• Proven hands‑on experience drafting SOX control narratives
  , risk‑control matrices (RCMs), and testing procedures.

• Strong experience defining and documenting Segregation of Duties (SoD) requirements.

• Solid understanding of ITGC (Access, Change, Operations).

• Experience working closely with Business, IT, and Audit teams
  .

• Familiarity with SOX frameworks, standard practices, and reusable templates
  .

• Excellent written and verbal communication skills with strong documentation abilities.

• Experience supporting public company SOX audits
  .

• Familiarity with GRC tools (e.g.,
  Archer, Service Now GRC, Audit Board
  ).

• Knowledge of ERP systems (SAP, Oracle, or similar).

• Professional certifications such as CISA, CIA, CPA (preferred).