The primary responsibility for the IT Compliance Analyst position will be support of the internal Sarbanes-Oxley (SOX) testing and compliance. The position will be responsible for the testing of internal controls, gathering documentation or evidence, and documenting the test results. The position will participate as needed with information sharing/gathering process for other audits/reviews, such as external SOX audits, internal audits and state insurance department reviews. The IT Compliance Analyst will be responsible for reviewing, developing, and/or maintaining IT Compliance standards and procedure documentation for ESTech or WRBC business units. The position will utilize knowledge of Sarbanes-Oxley requirements and the COBIT framework to perform audits/reviews. Upon completion of reviews, this position will make recommendations or be directly involved with addressing gaps or developing remediation plans/steps. Secondary responsibilities will include user and technical support of desktop applications.

Primary Duties & Responsibilities:

• Assist in the research and development of IT Compliance standards and guidelines.
• Test operational effectiveness of key controls using a variety of approaches, including sampling, corroboration, observation, performance.
• Documenting Sarbanes-Oxley testing results and/or findings, including the gathering and organizing of documentation or evidence collected.
• Reporting issues or deficiencies found during testing and tracking the associated remediation plans across companies and/or departments.
• Streamline the audit processes, including internal and external Audits, and other needs to ensure efficiency while ensuring compliance with all Local, State and Federal guidelines.
• Performing reviews of related IT Compliance documentation, procedures and controls, including creating work papers and making recommendations for remediation.
• Ensuring that issues and findings across all compliance related activities are documented and tracked for remediation, with direct involvement by either facilitation of discussions, or by being directly involved in the process.
• Coordinating any external audits to facilitate the process of gathering any requested information and/or documentation.
• Perform user access certifications for various internal applications.
• Working both independently and across teams, or across entities, to collect or distribute important information on processes, procedures, guidelines, etc.
• Serve as a subject matter expert on key internal controls, procedures, and workflows.
• Technical application support, including user administration, troubleshooting reported issues, application and server maintenance (patches, restarts), and database updates/maintenance.

Minimum Qualifications:

• 2 - 5 years’ experience participating in testing of SOX IT General Control and/or IT Compliance standards.
• Working knowledge and understanding of Sarbanes-Oxley compliance, including IT General Controls and Application controls, preferably within the commercial property and casualty lines.
• Working knowledge and understanding of COBIT framework. Proven ability to apply toward internal IT controls for the purposes of Sarbanes-Oxley or IT compliance activities is a strong plus.
• Hands-on experience with Sarbanes-Oxley or Compliance testing, including the development of remediation activities or steps.
• Proven ability to prioritize work load, work effectively on concurrent tasks, and be able to meet project deadlines.
• Proven ability to facilitate meetings or discussions with internal and external personnel to determine action items and completion dates.
• Software Development Life Cycle experience.
• Strong computer skills, including Microsoft Word, Excel, and Outlook.
• Strong technical and analytic aptitude.
• Ability and willingness to learn quickly.
• Extremely detail oriented, organized and advanced planning skills.
• Excellent oral and written communication skills to effectively communicate with both internal team and external contacts.
• Bachelor’s degree with emphasis in related field or equivalent experience.

Working Conditions and Physical Requirements:

• Ability to sit at a desk and work on a computer for extended periods of time
• May occasionally lift and/or move up to 50 pounds
• Vision abilities required by this job include close vision and ability to adjust focus
• Please note that this position will require a hybrid schedule where you will be required to be in the office 3 days per week, with the other days being work from home

Additional Company Details

We do not accept any unsolicited resumes from external recruiting agencies or firms.

Job Type: Full-time

Benefits:

• Health insurance

Compensation package:

• Performance bonus
• Profit sharing

Experience level:

• 3 years

Schedule:

• Monday to Friday

Work Location: In person