Senior Cyber Security Controls Assessor

IT - Cyber Security Controls Assessor - Senior

Location

Oakland, CA

Onsite Flexibility

Hybrid — at least once a week onsite expectation

Contract Details

• Position Type: Contract
• Contract Duration: 4 months
• Pay Rate: $75.00–$80.00 / Hour (USD)
• Work Authorization: Applicants must be authorized to work for ANY employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa at this time.

Job Summary

The Sarbanes-Oxley Act (SOX) Information Technology (IT) team within the Internal Audit Organization is responsible for overseeing the effective operation of the Utility's IT internal controls over financial reporting and acts in a consultative capacity as a business partner and IT SOX controls expert to the Utility. IT SOX Compliance Analysts are responsible for understanding the business environment, determining the SOX IT scope and controls, coordinating IT SOX testing aligning with the Utility's testing cycle, evaluating deficiencies, validating the remediation plans are appropriate, and providing controls guidance for any relevant IT system changes.

Key Responsibilities

• Provides guidance and act as a subject matter expert to Technology and Security Compliance personnel, system owners, and business process owners within and outside of IT organization on the identification, documentation, testing, and remediation of key controls for SOX IT processes.
• Evaluates, develops, and establishes appropriate testing objectives and test plans for the in-scope ITGCs (IT General Controls).
• Performs walkthroughs of medium to complex system processes and identifies gaps in controls.
• Assists in coordinating SOX audit performed by external auditors.
• Coordinates with system owners to monitor the progress of open SOX control deficiencies and remediation efforts.
• Evaluates ITGCs' deficiencies in accordance with the company's framework for evaluating control deficiencies and identifies associated financial statements impact.
• Performs and documents IT entity level controls testing.
• Performs quality assurance reviews on completed SOX IT testing documentation.
• Assists with the preparation of quarterly deliverables for Leaderships and Audit Committee.
• Trains new or existing process owners on the internal control compliance processes.
• Manages WDesk SOX module to facilitate with the quarterly SOX testing and deliverables.

Required Skills

• Solid understanding of AS5, COBIT framework, and COSO framework.
• Demonstrates knowledge of: (1) IT systems (applications, operating systems, databases, and middleware), (2) ITGCs, (3) control impact on most IT and business processes, and (4) SOD conflicts with IT access.
• Ability to assess potential impact of deficiencies, provide control advice for moderate to complex processes, and to positively influence system owners on control solutions.
• Ability to prioritize, perform, and communicate necessary SOX activities and communicate SOX findings both in written and verbal form that is cohesive, understandable, and actionable to stakeholders.
• Robust understanding of the SOX regulation, the Utility's standards and procedures, and industry best practices to provide control advice to stakeholders.
• Ability to ask detailed, probing questions, and to utilize research and issue resolution skills.
• Ability to effectively manage multiple diverse tasks and adhere to tight deadlines.
• Ability to initiate system reviews/walkthroughs, identify gaps and recommend appropriate controls with limited guidance.

Education Requirements

• Bachelor's degree in Management Information System, Computer Science, Accounting/Business, or equivalent experience (required).
• Master's Degree in Management Information System, Computer Science, or job-related discipline or equivalent experience (preferred).
• Certified Information Systems Auditor (CISA) (required).
• Certified Internal Auditor (CIA) (required).
• Certified Information Systems Security Professional (CISSP) (required).
• Certified Public Accountant (CPA) or equivalent (required).

Required Experience

• 5 years of relevant experience in SOX IT Compliance or other applicable areas, including public accounting experience.

Nice-to-Have Experience

• Previous experience in Big 4 Public Accounting or in the energy or public utility industry.
• Experience with internal/external audits.

Benefits

• Medical, Vision, and Dental Insurance Plans
• 401k Retirement Fund

About the Client

This client is a utility and energy sector organization headquartered in Oakland, CA, serving customers across the region as part of a major digital transformation initiative. The organization employs technology professionals, compliance analysts, data specialists, systems analysts, and IT controls experts who collaborate across enterprise systems and internal audit functions to support financial reporting integrity and operational modernization.

About GTT

GTT is a minority-owned staffing firm and a subsidiary of Chenega Corporation, a Native American-owned company in Alaska. We highly value diverse and inclusive workplaces and support Fortune 500 organizations across banking, financial services, technology, life sciences, biotech, utilities, and retail sectors throughout the U.S. and Canada.

Job Number

26-17971 Industry

Engineering

#LI-Hybrid #LI-GTT #gttce