BETSOL is seeking an experienced ITGC Audit Specialist to manage SOX Compliance activities. This role bridges compliance requirements with Identity Governance & Administration (IGA) platform operations, ensuring timely completion of access certifications and audit-ready documentation for external auditors. The ideal candidate will serve as the primary liaison between business stakeholders, system owners, and audit teams.
Responsibilities
- Initiate, monitor, and track quarterly user access review campaigns within IGA platforms
- Coordinate with business process owners, department heads, and system administrators to complete access certifications on schedule
- Send timely reminders, track completion rates, and escalate overdue or high-risk reviews to management
- Serve as primary point of contact for stakeholder questions regarding access review processes and platform navigation
- Gather, validate, and compile evidence of completed access reviews per audit standards
- Format evidence packages according to auditor specifications and requirements
- Maintain organized repositories of access review artifacts, supporting documentation, and audit trails
- Address auditor inquiries and provide requested evidence within required timeframes
- Provide training and guidance to business users on completing reviews within IGA platforms
- Facilitate cross-functional meetings to resolve complex access decisions and anomalies
- Document control testing results, remediation activities, and maintain communication logs
- Identify process inefficiencies and recommend improvements to access review workflows
- Support remediation of audit findings related to access management and user access controls
Skills
- 3+ years as Compliance Analyst, IT Auditor, or Identity Governance Coordinator
- Strong understanding of SOX Section 404 requirements and IT General Controls (ITGCs)
- Experience with Identity Governance & Administration (IGA) platforms (SailPoint, Saviynt, Pathlock, Zluri, SecurEnds, Okta Identity Governance, ConductorOne, or similar platforms)
- Knowledge of user access management, Segregation of Duties (SoD), and Role-Based Access Control (RBAC)
- Understanding of ERP systems (SAP, Oracle, Workday) and their security models
- Experience with automated access review campaign platforms such as Gathid (preferred), SCC Access Auditor, Lumos, SecurEnds, ConductorOne, or similar tools, for coordinating user access certifications, tracking reviewer responses, and managing evidence collection workflows.
- Familiarity with audit evidence requirements and documentation standards
- Advanced Excel, data analysis, and reporting capabilities
- Strong documentation skills using SharePoint, Microsoft Teams, or similar collaboration platforms
- Excellent communication and stakeholder management skills across all organizational levels
- Experience with regulated industries (financial services, publicly traded companies) preferred
- Bachelors degree in IT, Cybersecurity, Accounting, or Business Administration
- CISA or CIA certification preferred (or working towards certification)
- ITGC & SOX - Information Technology General Controls & Sarbanes-Oxley Act
- Proficiency in Agile/Scrum methodologies and process improvement approaches
- Detail-oriented with strong organizational and time management abilities
- Ability to manage multiple concurrent review campaigns and meet quarterly audit deadlines
