IT GRC Junior Analyst

The job

The IT GRC Junior Analyst supports AVEVAs internal control certification activities under PCAOB/SOX. This role operates within the first line of defence and is responsible for validating IT General Control (ITGC) documentation, tracking audit evidence, and ensuring timely readiness of compliance deliverables. This role should ensure that documentation meets required standards across AVEVAs business-critical systems.

Key responsibilities

• Validate ITGC evidence across access, change, and operational control areas using QA checklists
• Support control owners in preparing audit-ready documentation, ensuring clarity and completeness
• Maintain centralized repositories and trackers (e.g. SharePoint, Teams) to ensure document version control
• Identify documentation gaps and inconsistencies, escalating to the Senior Manager where necessary
• Participate in audit walkthroughs and help prepare supporting documentation
• Assist in user access reviews, control testing activities, and incident log validations
• Contribute to QA training guides, awareness material, and document templates
• Support coordination with second-line (Risk & Control) and third-line (Internal Audit) teams

Essential requirements

• 4-6 years of experience in IT audit, GRC, or internal control environments
• Foundational knowledge of PCAOB/SOX, ISO 27001, or equivalent frameworks
• Proficient in Microsoft Excel, SharePoint, and Teams
• Experience handling ITGC evidence across enterprise platforms
• Strong communication skills with attention to documentation quality
• Ability to manage deliverables across multiple systems and teams

Desired skills

• Exposure to enterprise systems such as Oracle, SAP, Salesforce, or Workday
• Familiarity with ServiceNow or audit workflow tools
• Understanding of user access governance and change enablement
• Experience supporting external auditors or formal IT assurance reviews
• Awareness of regulatory topics including GDPR or data retention
• Experience with Riskonnect, SAP GRC, or similar governance, risk, and compliance tools
• Experience working in a Big 4 firm (e.g., Deloitte, EY, KPMG, PwC)

Competencies

• Evidence quality and documentation discipline
• Attention to detail and process control
• Proactive stakeholder communication
• Team collaboration and support mindset
• Accountability for timelines and compliance outcomes
• Structured problem solving with audit awareness.