SOX Compliance Analyst

IT Audit & Compliance Analyst

The IT Audit & Compliance Analyst will serve as subject matter expert and is responsible for assisting the Director of Information Security in assessing, developing, implementing, maintaining, and monitoring Bonnell Aluminum’s IT compliance programs by providing guidance, support, analysis, and reports to IT management based on internal and external compliance requirements such as SOX and TISAX. This role will also heavily engage with IT management, staff, and departments outside Tredegar / Bonnell’s IT department, as well as Internal Audit and external auditors, in continuously identifying gaps, feasible resolutions and improvements to control weaknesses and opportunities in support of Bonnell Aluminum’s internal controls.

Qualifications

• At least 1 year of experience in IT Risk and Compliance audits, IT Assurance, Internal Audit, other audit controls related field or related IT audit work in public accounting.
• Work experience in administering and / or testing windows and / or Linux servers, Active Directory structures, Oracle or SQL databases, AS400, SAP and / or VMware environments.
• An understanding of PCAOB guidance on generally accepted practices for testing SOX IT General Controls, Business Process Controls, Key Reports, and Application Controls a plus.
• An understanding of TISAX a plus.
• Experience deploying and using GRC tools a plus.
• Exceptional client service and communication skills. Strong technical aptitude and problem-solving skills, excellent analytical, communication (written and verbal) and interpersonal skills.
• Effective project and time management skills for handling multiple priorities and simultaneous projects.
• Enthusiasm to learn through a combination of structured, on-the-job, and self-directed training.
• Ability to work efficiently and effectively in a complex and decentralized IT environment.
• Strong computer skills including proficiency in Microsoft Office suite applications.
• Must possess competence to understand and manage work / project obstacles and complexities, including work / project scope, key players, urgency, inherent risks, and business benefits.
• Ability to work additional hours and / or travel as needed.

Strategy & Planning

Requirements