Job Description

Job Title: Security Analyst

No. of Positions: 1

Start Date: August 11, 2025

End Date: February 13, 2026

Position Type: Contract

Location: Seattle, WA (Partial Remote)

Primary Skills: SOX, Azure, Oracle

Role Summary:

As a GRC Compliance Specialist , you will support and manage IT General Controls (ITGCs) related to SOX 404 compliance . You'll work closely with cybersecurity, audit teams, and business stakeholders to ensure proper control design, operation, and evidence collection. This role involves compliance coordination, remediation tracking, stakeholder education, and audit preparation.

Key Responsibilities:

• Lead and support the IT SOX 404 program execution.
• Document SOX control narratives and test ITGC operating effectiveness.
• Act as SME for SOX IT compliance, guiding business and IT stakeholders.
• Facilitate walkthrough meetings, evidence gathering, and audit issue resolution.
• Identify and monitor remediation of control deficiencies.
• Track and automate audit workflows using GRC tools (e.g., ServiceNow).
• Assist in quarterly certifications and attestations.
• Provide reports, metrics, and dashboards to demonstrate SOX program effectiveness.
• Collaborate with architecture and technology teams to assess SOX impacts of new systems or changes.
• Apply risk-based approaches to audits and control testing.
• Maintain documentation and centralized repositories for audits.

Required Qualifications:

• 5+ years of experience in Security GRC, IT Audit, or SOX Compliance.
• Big 4 IT Audit background or similar highly preferred.
• Deep knowledge of SOX 404 , ITGCs, and risk-based audit methodologies.
• Proven experience evaluating and testing controls in retail environments .
• Familiar with ITGC domains: access control, change management, IT operations, and SDLC.
• Experience with cloud platforms (Azure, AWS) and SaaS compliance implications.
• Proficiency with Oracle EBS , Retail Management Systems, and other retail tech.
• Skilled in using GRC tools like ServiceNow for audit and evidence workflows.
• Ability to communicate and influence cross-functional stakeholders.
• Demonstrated success in managing audits, remediation, and control tracking.
• Comfortable working across multiple time zones and in a fast-paced environment.

Preferred Certifications:

• CISA – Certified Information Systems Auditor.
• CPA – Certified Public Accountant.
• CIA – Certified Internal Auditor.

Job Tags

Similar Jobs