Назад
Company hidden
20 часов назад

Senior Analyst, IT Risk & GRC (Cybersecurity)

90 500 - 143 000$
Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Analyst, IT Risk & GRC (Cybersecurity): Integrating IT risk management and compliance into enterprise technology transformations with an accent on SOX readiness, ITGCs, automated controls, and audit-ready documentation. Focus on designing and validating controls across complex IT environments, resolving remediation gaps, and translating technical risks into actionable insights for finance and audit executives.

Location: Site-based in Carlsbad, California; Duluth, Georgia; or Tempe, Arizona, with work from a hirify.global office or work location at least 3 days (60%+) per week. U.S. citizenship is required.

Salary: $90,500–$143,000 annually. For specific work locations in San Jose, the San Francisco Bay Area, and the New York City metropolitan area: $112,500–$168,500 annually.

Company

hirify.global develops global communications services connecting consumers, businesses, governments, and militaries.

What you will do

  • Lead IT SOX compliance activities, including scoping, risk assessment, and testing of IT general controls across change management, logical access, and computer operations.
  • Develop compliance roadmaps and maintain the IT controls framework in alignment with COBIT, NIST, ISO, and organizational risk appetite.
  • Monitor remediation milestones, perform independent validation testing, and resolve testing exceptions with internal and external auditors.
  • Design and document ITGCs and automated application controls for system implementations, upgrades, and enhancements.
  • Integrate controls into the SDLC and create repeatable, audit-ready control walkthroughs.
  • Advise IT, Engineering, Finance, and Audit stakeholders while translating technical risks into executive-level insights.

Requirements

  • 5+ years of experience in IT Audit, IT Compliance, or IT Risk Management.
  • Bachelor’s degree or equivalent experience in MIS, Accounting Information Systems, Computer Science, Finance, or a related field.
  • Strong expertise in SOX frameworks, ITGCs, automated application controls, and IUC/IPE report testing.
  • Experience designing, implementing, or testing controls across applications, databases, and infrastructure during system implementations.
  • Excellent communication and stakeholder management skills, including explaining technical IT risks to non-technical financial executives.
  • Professional certifications such as CISA, CRISC, CISSP, or technology-focused CPA are preferred; U.S. citizenship is required.

Nice to have

  • Experience with large-scale digital transformations or ERP implementations such as SAP, Oracle, or Workday.
  • Familiarity with automated controls, cloud environments, SaaS, PaaS, and GCP data environments.
  • Experience influencing stakeholders across highly matrixed global organizations.
  • Exposure to data analytics or visualization tools such as Tableau.
  • Experience facilitating focused working sessions to gather audit support.

Culture & Benefits

  • Inclusive environment focused on positive global impact.
  • Medical, financial, and other benefits may be available depending on the position.
  • Additional cash or stock incentives may be provided.
  • Benefits support holistic health and wellness.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →