Oracle Fusion ITGC Analyst

Support Oracle Fusion Financials and ITGC processes in a global enterprise environment 

Primary Responsibilities

• Serve as the CIS division-wide subject matter expert for IT General Controls, SOX compliance, technology controls, and PCAOB audit readiness.
• Develop and maintain consistent ITGC policies, standards, control procedures, documentation, and evidence requirements across in-scope CIS applications and technologies.
• Partner with application owners, administrators, developers, infrastructure teams, Finance, Internal Audit, and other stakeholders to incorporate compliance by design into systems, integrations, changes, and operational processes.
• Configure and administer Fastpath GRC for User Access Reviews, segregation-of-duties monitoring, access-risk analysis, mitigating controls, audit-log reviews, and compliance reporting.
• Coordinate periodic access reviews and monitor privileged access, service accounts, segregation-of-duties conflicts, and joiner, mover, and leaver controls.
• Oversee controls for system development, change management, configuration changes, production migrations, computer operations, interfaces, batch processing, and audit logging.
• Conduct ITGC risk assessments, control walkthroughs, self-assessments, compliance reviews, and evaluations of control design and operating effectiveness.
• Identify control gaps, perform root-cause analysis, and coordinate sustainable remediation of deficiencies and recurring exceptions.
• Act as the primary CIS liaison with internal and external auditors for ITGC walkthroughs, questionnaires, evidence requests, testing, findings, and remediation.
• Maintain an audit-ready documentation library, including control narratives, risk and control matrices, access reviews, change evidence, test results, SOC reports, bridge letters, and remediation records.
• Review third-party assurance reports and coordinate responses to exceptions, complementary user-entity controls, and other service-provider risks.
• Develop and deliver division-wide training, job aids, and guidance on SOX, ITGC, access governance, change controls, audit evidence, and control-owner responsibilities.
• Provide CIS leadership with reporting on audit readiness, control execution, deficiencies, remediation progress, and emerging compliance risks.
• Stay current on SOX Section 404, PCAOB, COSO, COBIT, ITGC, identity governance, cloud controls, and public-company compliance requirements.

Requirement

• Typically requires 4–6 years of experience in IT audit, IT risk and compliance, SOX, ITGC, application controls, financial systems, or a related technology-control function.
• Demonstrated experience designing, operating, assessing, or auditing ITGCs across enterprise applications and supporting technologies.
• Strong knowledge of access management, privileged access, segregation of duties, change management, system development, computer operations, interfaces, configuration management, and audit logging.
• Experience supporting SOX Section 404 compliance or audits of internal control over financial reporting.
• Experience conducting risk assessments, control walkthroughs, self-assessments, control testing, deficiency evaluations, and remediation validation.
• Experience coordinating with internal and external auditors and preparing complete, reliable, and timely audit evidence.
• Experience developing policies, procedures, control narratives, risk and control matrices, testing documentation, and audit workpapers.
• Familiarity with GRC, identity-governance, access-certification, audit-management, or compliance-monitoring applications.
• Understanding of SOC reports, bridge letters, complementary user-entity controls, and third-party assurance requirements.
• Strong analytical, project-management, communication, and stakeholder-influencing skills.
• Ability to work independently and coordinate compliance activities across global, cross-functional teams.
• Bachelor’s degree in Accounting, Finance, Information Systems, Computer Science, Cybersecurity, Information Technology, or a related field.
• Equivalent combinations of education, training, professional certifications, and relevant experience may be considered.
• You’re curious, passionate, authentic, and accountable. These are our values and influence everything we do.

Mandatory Technical Skills

• CISA, CIA, CPA, CRISC, CISM, CISSP, CGEIT, or a comparable audit, risk, security, or compliance certification.
• Experience supporting PCAOB-regulated audits in a public company or public-company-readiness environment.
• Experience in IT audit, technology risk, or controls advisory with a major accounting or professional-services firm.
• Hands-on experience administering Fastpath GRC or a similar enterprise GRC platform.
• Experience with Oracle Fusion Cloud ERP, Oracle EPM Cloud, Workday, Boomi, Microsoft Azure, Active Directory, databases, data warehouses, or other enterprise technologies.
• Experience with identity governance, role-based access, privileged-access management, service accounts, and joiner, mover, and leaver controls.
• Experience evaluating automated controls, system-generated reports, interfaces, data integrity, and information produced by the entity.
• Working knowledge of SQL, reporting tools, data analytics, or continuous-control monitoring.
• Experience supporting multinational technology environments, shared services, subsidiary audits, or geographically distributed teams.
• Demonstrated ability to train and guide technical and nontechnical stakeholders on SOX and ITGC responsibilities.
• Strong customer-service orientation with the ability to challenge ineffective practices and escalate unresolved compliance risks.