ITGC SOX Analyst

As our ITGC SOX Analyst, you’ll play a key part in delivering IT SOX Audit getting hands-on with IT risks and controls. Your drive and ideas will help us move faster, improve smarter, and stay ahead of the game.

• Provide SOX and IT control support to in‑flight and upcoming IT projects (e.g. system implementations, migrations, upgrades, decommissioning, implementation of controls, remediations).
• Support in identifying SOX‑relevant risks early and addressed as part of project delivery.
• Act as the SOX point of contact for project managers and delivery teams.
• Identify new or changed ITGCs and application controls arising from project changes.
• Support risk assessments for new systems, interfaces, and processes.
• Document control impacts and required mitigation actions.
• Provide guidance to project teams on control requirements and documentation needs.
• Contribute to standardising SOX project assessment approaches.
• Support development of templates, checklists, and guidance for future projects.
• Act as the primary ITAC, IPEs (reports) and third party assurance (SOC reports) subject‑matter expert for Internal and External Audits.
• Support walkthroughs, explain control design and reliance strategy, and coordinate evidence provision.
• Lead the design and implementation of IT application controls, IPEs, third party assurance controls.
• Define and maintain controls library in the GRC platform.
• Partner with Business Process and IT team to ensure ITACs, IPEs and third party assurance controls are appropriately implemented to support business process controls (e.g., automated postings, system‑generated reports).
• Confirm correct linkage between ITACs and financial statement assertions within RCMs.
• Resolve gaps where manual controls are incorrectly assumed to be automated.
• Assess SOX impact of application changes, upgrades, patches, and configuration updates on ITACs.
• Ensure ITACs are reviewed, updated, and re‑validated following system changes.

• Clear, confident communication (written and verbal), and the ability to breakdown complex ideas (required).
• A collaborative mindset, working smoothly with cross‑functional teams to hit shared goals (required).
• Strong organisational skills and the ability to manage multiple projects without dropping the ball (required).
• Exceptional attention to detail and a commitment to high‑quality work (required).
• Adaptability – you stay sharp, productive and positive in fast‑moving environment (required).
• Bachelor’s degree in Information Systems, Accounting, IT, or related field (required).
• 2–3 years of experience in IT audit, IT SOX compliance, or a related role (required).
• Strong understanding of SOX requirements and frameworks like COSO, specifically related to IT controls (required).
• Proven experience implementing and testing IT General and Automate Controls (required).
• Proficiency with audit documentation tools or software (required).
• Proficiency in using Microsoft Office and other relevant software applications for data entry, document management, and report generation (required).
• Strong organizational and time management skills, with the ability to prioritize tasks and manage multiple responsibilities effectively (required).
• Excellent communication and interpersonal skills, with the ability to work collaboratively with diverse teams and stakeholders (required).
• Attention to detail and accuracy in data entry and documentation, with a commitment to maintaining confidentiality and integrity of information (required).
• Certifications such as CISA, CISM, CISSP, CRISC, or similar (preferred).
• Experience in IT risk assessment, IT control evaluation, and audit planning (preferred).
• Familiarity with cloud environments, emerging technologies, and relevant frameworks (e.g., SOC) (preferred).
• Strong analytical mindset and attention to detail (preferred).
• Self-starter with project management capabilities (preferred).
• In-depth knowledge of ITGCs (e.g., access controls, change management, operations, backup) (preferred).
• Expertise in ITACs, interfaces, data validations, and automated controls (preferred).
• Ability to evaluate control effectiveness and remediate deficiencies (preferred).
• Experience with audit automation, data analytics tools, and documentation (preferred).
• Familiarity with SDLC processes and governance (preferred).
• Strong administration and organisational skills (required).
• Ability to innovate and show initiative (required).
• Good communication and interpersonal skills (required).
• Willing to take on challenging responsibilities (required).
• Ability to work in a pressurized environment (required).
• Ability to work independently as well as in a team (required).
• Adaptable (required).
• Exceptional quality focus, organizational skills and attention to detail (required).

• Supergrowth is real here. Our learning and development programmes give you the tools, training and opportunities to level up fast.
• Our Performance tool ensures you get meaningful feedback to support your development and superdrive your career.
• Our Employee Assistance Programme offers resources for you and your family.
• Group Life Cover
• Funeral Fund Benefit
• Income Continuation Benefit
• Medical Aid Subsidy
• Retirement Annuity Subsidy