IT GRC Specialist (Technical Compliance & SOX) Sr. Engineer

Description

• SOX Liaison & Execution: Act as the "Front Door" for all IT-related SOX queries. You won't pass questions along; you will investigate, pull evidence, and validate the accuracy of data before it reaches the auditors.
• Hands-on Control Validation: Perform technical testing of automated controls, user access reviews (UAR), and Change Management logs across integrated platforms.
• System Configuration Oversight: Partner with IT Admins to ensure configurations in Oracle Fusion and SFDC (Salesforce) remain in compliance with SOD (Segregation of Duties) policies.
• Integration Auditing: Monitor and audit data flows through Oracle OIC to ensure the integrity of financial data passing between systems.
• Policy Enforcement: Manage and audit the Office 365 environment, focusing on security groups, data retention, and administrative privilege management.
• Remediation Leadership: When a control deficiency is identified, you will work directly within the systems to design and implement technical remediations.

• ERP & CRM Mastery: Proven experience managing or auditing Oracle Fusion (ERP), Workday and Salesforce (SFDC).
• Middleware Knowledge: Understanding of integration layers, specifically Oracle Integration Cloud (OIC), and how data transformations impact financial reporting.
• SaaS Administration: Experience with Office 365 security/compliance centers and identity management.
• Audit Methodology: Solid grasp of COBIT or NIST frameworks and their application to SOX 404 requirements.
• Preferred Certifications: CISA (Certified Information Systems Auditor), CRISC, or similar technical audit credentials.

• Excellent communication and collaboration skills, with the ability to interact with finance users in their language.
• Problem-solving skills and a professional, diligent, and hardworking attitude.
• Ability to work in a fast-paced environment with aggressive timelines and multiple teams coordinating with each other
• Stakeholder management
• Mindset: You enjoy "going under the hood" of an application to see how a workflow is configured rather than just reading a policy document.