IT SOX Internal Controls Analyst

The IT SOX Internal Controls Analyst is a role within Owens Corning’s Global Finance, Operations & Reporting (GFOR) organization responsible for driving internal controls awareness, knowledge, and compliance throughout the Company. This role will interact with leaders throughout the organization, Global Information Systems (“GIS”), external auditors, and internal auditors. This role will be tasked to drive new ideas and approaches based on Information Technology General Controls (“ITGC”), IT dependencies, and Information Produced by the Entity (“IPE”) best practices, as well as creating synergies by providing reliable data around management testing coverage, results, and sustainability for ITGC testing coverage. 

The position is suited to driven, curious individuals who are able to work independently and lead mid – large size projects.  Qualified candidates will have a minimum of 1-3 years of IT auditing experience, preferably in multi-national corporations, and public accounting experience is strongly preferred. Candidates should possess excellent communication and analytical skills and must demonstrate the ability to be successful in a fast-paced and dynamic, team-oriented environment.

This position reports to the Global Internal Controls Leader.

Supports the annual in-scope applications assessment for the Sarbanes-Oxley (“SOX”) management testing scoping memo.

• Performs design and operating effectiveness testing for SOX IT General Controls (ITGC) with some oversight from the Global Internal Controls Leader.
• Completes detailed and quality work-papers that includes corroborative evidence to support management testing conclusions within the expected deadlines.
• Applies feedback or review comments from submitted work-papers and demonstrates continuous improvement in their documentation or testing.
• Optimally communicates testing status, conclusions, and sharing knowledge with team members.
• Conducts ITGC walkthrough meetings (access security, IT operations, and change management) with control owners to understand the processes and gather evidence with some support of the Global Internal Controls Leader.
• Assists with key reports testing, critical spreadsheet testing, IPE governance, and special projects/assignments.

Drive IT internal control awareness, knowledge, compliance, and excellence to support operational and financial risk mitigation:

• Develops and maintains strong relationships with GIS to ensure changes to the internal controls properly mitigate risks in an efficient manner
• Influence and manage stakeholder’s expectations while maintaining independent view.
• Continuously seeks opportunities to learn key management testing processes/testing framework/methodology.
• Drafts and communicates control deficiencies and performs a root cause analysis with some support.
• Partners with GIS and owners of Service Organizations to implement ITGC’s, Complementary User Entity Controls, IPE best practices, and supports the assessment of SOC 1 Type II reports.

Experience:

• Bachelor's Degree (Information Management, MIS, Computer Science, Finance, Accounting or related combinations or degrees with business and technical mix).
• 5+ years of relevant work experience; preferably with public accounting firm, consulting audit firm, or internal audit.
• Minimum of 1-3 years of experience auditing information technology control processes
• Professional certifications (CISA, CPA, or CIA preferred) and big-four audit experience strongly preferred.

Knowledge, Skills and Abilities:

• Understanding of SOX.
• Understanding of IT risk and general information security concepts and technology infrastructure.
• Understanding of core IT general control processes (e.g., Information Security, Change Management, Software Development Lifecycle, IT Operations etc.).
• Understanding of Business Process controls is a plus.
• Knowledge of technical platforms, networks, security concepts, and data retrieval techniques.
• Proficiency in auditing/testing SAP.
• Proficiency in Microsoft Office: Excel, PowerBI, Visio, Word, PowerPoint, and Outlook.
• Dedication to ethical behavior and the ability to maintain objectivity.

Personal Characteristics:

• Goal oriented / Edge – Strives toward goals with decisiveness and determination. Demonstrates courage to take risks, demands excellence, and drives for results with speed. Faces into conflict, interacts with candor and addresses challenges with urgency.
• Integrity – Can be trusted to maintain financial integrity to the corporation, employees, and shareholders.
• Creativity – Strives for continuous and breakthrough improvement in business process and results; sets and encourages others to set continually higher goals; strives to achieve a best-practice approach; and takes and encourages others to take stands.
• Decision Making – Independently recognizes issues, problems, or opportunities, and determines whether action is needed; socializes ideas and judgmental decisions; is transparent and uses a risk-based approach when making tough calls.
• Elevates Performance – Accepts responsibility for outcomes of one’s work; admits and learns from mistakes; refocuses efforts when appropriate.
• Self-Awareness – Continually assesses and appreciates the impact of own behavior upon others and the environment; adjusts behavior based upon understanding of own impact and desired outcomes.

#LI-KM2

#LI-Hybrid