Logo
Probal DasGupta

Security Analyst

Probal DasGupta, Pasco, Washington, us, 99302

Save Job

Job Title: Security Analyst

No. of Positions:

1

Start Date:

August 11, 2025

End Date:

February 13, 2026

Position Type:

Contract

Location:

Seattle, WA (Partial Remote)

Primary Skills:

SOX, Azure, Oracle

Role Summary:

As a

GRC Compliance Specialist , you will support and manage IT General Controls (ITGCs) related to

SOX 404 compliance . You'll work closely with cybersecurity, audit teams, and business stakeholders to ensure proper control design, operation, and evidence collection. This role involves compliance coordination, remediation tracking, stakeholder education, and audit preparation.

Key Responsibilities: Lead and support the IT SOX 404 program execution. Document SOX control narratives and test ITGC operating effectiveness. Act as SME for SOX IT compliance, guiding business and IT stakeholders. Facilitate walkthrough meetings, evidence gathering, and audit issue resolution. Identify and monitor remediation of control deficiencies. Track and automate audit workflows using GRC tools (e.g., ServiceNow). Assist in quarterly certifications and attestations. Provide reports, metrics, and dashboards to demonstrate SOX program effectiveness. Collaborate with architecture and technology teams to assess SOX impacts of new systems or changes. Apply risk-based approaches to audits and control testing. Maintain documentation and centralized repositories for audits. Required Qualifications:

5+ years

of experience in Security GRC, IT Audit, or SOX Compliance. Big 4 IT Audit

background or similar highly preferred. Deep knowledge of

SOX 404 , ITGCs, and risk-based audit methodologies. Proven experience evaluating and testing controls in

retail environments . Familiar with ITGC domains: access control, change management, IT operations, and SDLC. Experience with

cloud platforms

(Azure, AWS) and SaaS compliance implications. Proficiency with

Oracle EBS , Retail Management Systems, and other retail tech. Skilled in using

GRC tools

like ServiceNow for audit and evidence workflows. Ability to communicate and influence cross-functional stakeholders. Demonstrated success in managing audits, remediation, and control tracking. Comfortable working across

multiple time zones

and in a fast-paced environment. Preferred Certifications:

CISA

- Certified Information Systems Auditor. CPA

- Certified Public Accountant. CIA

- Certified Internal Auditor.