Senior IT Internal Controls Analyst

The Senior IT Internal Controls Analyst serves as Information Technologys primary liaison and coordination point for internal audit, external audit, Finance, controller, risk, compliance, cybersecurity, application owners, infrastructure teams, and third-party service providers. The role supports the design, documentation, testing, monitoring, and continuous improvement of IT controls that enable reliable financial reporting and effective technology governance, with particular emphasis on Sarbanes-Oxley (SOX) systems and business-process support.

This position coordinates audit requests and evidence, evaluates IT general controls and automated/application controls, supports remediation of deficiencies, and embeds control requirements into key system implementations and significant changes. The analyst provides control-focused oversight across the systems development lifecycle (SDLC), including requirements, design, security, data conversion, interfaces, testing, segregation of duties, deployment, and post-implementation stabilization. Experience with ServiceNow and Microsoft Dynamics 365 Finance and Operations (FinOps) and Project Operations (Proj Ops) is preferred.

Responsibilities:

• Serve as the primary IT liaison for Internal Audit, External Audit, Finance, Risk, Compliance, and other stakeholders on IT controls and audit-related activities.
• Coordinate audit planning, walkthroughs, evidence collection, testing requests, and responses to support internal and external audits.
• Support the organizations SOX compliance program across financially relevant systems, applications, and business processes.
• Evaluate and monitor IT General Controls (ITGCs), including user access management, segregation of duties, change management, incident management, and backup/recovery controls.
• Support the design, documentation, testing, and monitoring of automated controls, application controls, and key financial reporting controls.
• Facilitate risk assessments, control reviews, deficiency management, and remediation activities to improve control effectiveness.
• Maintain risk and control documentation, including process narratives, flowcharts, control matrices, and audit-support documentation.
• Provide controls and governance support for system implementations, ERP projects, upgrades, integrations, and digital transformation initiatives throughout the SDLC lifecycle.
• Review project deliverables, security roles, data migration activities, testing results, and deployment readiness from a controls and compliance perspective.
• Develop audit readiness, remediation, and control-performance reporting for management and leadership teams.
• Partner with ServiceNow, Microsoft Dynamics 365, Finance, Cybersecurity, Infrastructure, and Application teams to support technology governance and compliance requirements.
• Identify opportunities to automate controls, standardize processes, improve audit readiness, and strengthen the overall control environment.

Preferred Qualifications:

• Experience with ServiceNow ITSM, Governance, Risk & Compliance (GRC), Audit Management, or related modules.
• Experience supporting Microsoft Dynamics 365 Finance & Operations (FinOps) and Project Operations (Proj Ops).
• Knowledge of Segregation of Duties (SoD) analysis, ERP security design, workflow controls, and financial system governance.
• Experience supporting enterprise ERP transformations, cloud-based platforms, and global technology implementations.
• Familiarity with third-party assurance reporting, SOC reports, complementary user entity controls (CUECs), and vendor risk management.
• Experience working within large, global, regulated, engineering, professional services, or multi-provider environments.
• Knowledge of business process controls related to finance, accounting, project management, and reporting processes.

Belong. Connect. Grow. with KBR!