Job Summary
The IT Analyst IV will serve as a business analyst and SOX analyst supporting IT SOX, business controls, quality management, and control documentation activities. The role will partner with business, IT, internal audit, SOX Governance, external auditors, and leadership to develop, assess, document, test, and remediate internal controls across assigned portfolios, including control design and operating effectiveness. The role will support ITGCs, automated and configurable controls, access controls, change management, SDLC controls, reports and information produced by systems, interface controls, deficiency management, and control evidence. The position will also evaluate existing SOX, operational, and compliance controls to identify opportunities for automation, simplification, standardization, and improved control efficiency while maintaining audit defensibility.

Key Responsibilities
• Develop, plan, and evaluate internal audit programs to ensure compliance with organizational policies, procedures, and standards.
• Lead assigned portfolios as overall lead, project manager, and assessor for internal controls and IT SOX activities.
• Lead control deficiency reviews for IT SOX controls and support remediation activities.
• Manage risk, audit, and control matrices (RACMs) and control narrative documentation.
• Support scoping assessments, IT project SDLC control assessments and design, robotic process automation design reviews, scoping memos, remediation plans, governance reporting, and executive-ready status updates.
• Perform business analysis activities, including stakeholder interviews, requirements gathering, current-state and future-state process mapping, gap analysis, and action tracking.
• Translate control requirements into process and documentation requirements.
• Evaluate control design and operating effectiveness across assigned portfolios.
• Assess ITGCs and control domains including access controls, change management, SDLC controls, automated and configurable controls, reporting, interfaces, control deficiencies, and control evidence.
• Audit information systems applications to ensure appropriate controls exist and information produced by systems is accurate.
• Determine proper accountability of assets and audit accounting records associated with contract agreements.
• Prepare audit reports and recommendations for management based on audit results.
• Interface with and assist internal and external auditors to facilitate audit activities.
• Advise stakeholders on information systems, internal controls, security procedures, and compliance requirements.
• Identify opportunities to automate, simplify, standardize, and improve existing SOX, operational, and compliance controls without weakening control effectiveness or audit readiness.
• Lead cross-functional teams and communicate control requirements, findings, risks, and recommendations to stakeholders ranging from frontline teams through executive leadership.
• Develop and maintain control documentation, process flows, issue logs, decision logs, control narratives, remediation plans, and governance materials.
• Use AI and digital tools to modernize analysis, documentation, reporting, and control execution while maintaining audit defensibility.

Required Qualifications
• Bachelor's degree in business, accounting, finance, information systems, technology, engineering, a related field, or equivalent experience.
• 7+ years of experience implementing internal control policies, processes, controls, and system improvements.
• Strong experience with SOX, regulatory and operational controls, risk management, audit coordination, and business analysis.
• Strong knowledge of ITGCs and related control domains, including access, change management, SDLC, automated and configurable controls, reporting, interfaces, control deficiency management, and control evidence.
• Experience leading cross-functional teams and assessing complex business and control issues.
• Experience developing control documentation, managing RACMs and narratives, supporting control testing, and evaluating control design and operating effectiveness.
• Strong ability to analyze data and process flows and communicate findings clearly to technical and non-technical stakeholders.
• Strong critical-thinking, problem-solving, judgment, and decision-making skills.
• Ability to work independently, deal with ambiguity, and move work forward without step-by-step direction.
• Ability to challenge existing control designs and processes constructively.
• Experience using AI and digital tools to improve analysis, documentation, and operational efficiency.

Preferred Qualifications
• Experience with large-scale software implementations and enterprise business process control environments.
• Experience in the utility industry.
• Professional training or certifications in audit, such as CIA, CISA, CRISC, or equivalent.
• Experience in quality management, controls, risk, or project delivery.
• Experience liaising with internal and external auditors.
• Experience producing executive-level presentations, SOX status reports, governance materials, control deficiency memos, remediation plans, scoping memos, process flows, control design and operating effectiveness assessments, testing support documentation, issue logs, decision logs, and control narratives.
• Experience identifying opportunities to automate or simplify SOX controls, reduce manual effort, improve evidence quality, and modernize control documentation using AI-enabled or digital productivity tools.