Work Location: Bannockburn, ILPosition Purpose:The Risk & Compliance Analyst Sr IT will be responsible for defining and implementing leading practice IT internal controls within Stericycle's IT environment and driving a control-conscious and compliant organization.Key Job Activities:Support control owners through the full management of the IT SOX audit cycle, including assisting with control improvements, maintaining the IT SOX control framework, facilitating management prep sessions, and validating audit evidence.Build and maintain positive relationships with stakeholders, including application, process, and control owners, along with management in support of IT Risk and Compliance processes.Gain knowledge of SAP S/4, SuccessFactors, Salesforce, Descartes, Coupa, Concur, and other legacy systems for IT SOX controls.Perform targeted risk assessments and provide recommendations to Control Owners.Participate in scoping activities for IT SOX applications, system changes, and business transformation projects.Contribute to the design and implementation of enhancements for internal controls such as segregation of duties, change management, access management, IT operations, workflow, and application configuration.Validate audit evidence for completeness and accuracy prior to submission to auditors.Identify, communicate, and coordinate efforts to resolve control exceptions.Drive continual improvement of the IT SOX governance program through training, facilitation, and creating support materials.Review deficiencies identified during audits and collaborate on remediation plans.Support IT policy steering committee with senior management to develop and roll out IT policies.Support IT GRC steering committee to improve controls with senior management.Assist with user entitlement reviews using custom tools built on Alteryx and Outsystems.Act as a liaison to internal/external auditors, coordinating audit activities including SOC-1 reviews.Assist management with remediation plan development and execution.Participate in IT SOX walkthroughs to understand current processes and controls.Maintain status reports and key metrics for IT Risk and Compliance.Perform other duties as assigned.Education:Preferred: Bachelor's degree or equivalent in related field.Experience (North America & LATAM):Bachelor's degree in Information Systems, Computer Science, Accounting, Business, or related field.5+ years of relevant experience.Familiarity with IT controls frameworks and audit methodologies (COSO, COBIT, ISO, CMM, ITIL, PCI, NIST, SSAE 18 SOC).Strong understanding of IT Sarbanes Oxley (IT SOX).Experience with internal/external audits, SAP, and certifications like CISA, CISM, CIA, CPA are pluses.Proficiency in Microsoft Office tools and project management basics.Excellent interpersonal, communication, and organizational skills.Ability to work in a fast-paced, global environment and manage cross-functional teams.Experience (EMEAA):Details not specified.Certifications and/or Licenses:Details not specified.Benefits:Stericycle offers comprehensive benefits including health care, flexible spending accounts, insurance, employee assistance, tuition reimbursement, paid time off, 401(k), and stock purchase plan, subject to eligibility.Disclaimer:This description provides a summary and is not exhaustive. Stericycle may modify responsibilities at any time. Requests for workplace accommodations will be considered in accordance with policies and laws.
#J-18808-Ljbffr