IT ICFR (Internal Controls over Financial Reporting)
Job Summary
Responsible for designing, testing, and monitoring IT General Controls (ITGCs) and IT automated controls (ITACs) that support the organization's financial reporting processes. This role works closely with IT, Finance, external auditors, and process owners to ensure IT controls relevant to financial systems are properly designed, operating effectively, and documented in accordance with regulatory and audit standards.
Key Responsibilities
- Evaluate and test IT General Controls (ITGCs) across access management, change management, computer operations, and program development for financial systems (ERP, sub-ledgers, reporting tools).
- Assess IT-dependent manual and automated application controls (interfaces, system calculated values, configurable controls) supporting key financial processes. • Perform risk assessments to identify in-scope IT systems, applications, and infrastructure relevant to ICFR.
- Document control narratives, risk-control matrices (RCMs), and process flowcharts for IT controls.
- Coordinate with control owners to remediate control deficiencies and track remediation through closure.
- Support walkthroughs, control design assessments, and operating effectiveness testing.
- Liaise with external auditors; provide evidence and respond to audit inquiries.
- Monitor changes in the IT environment (system implementations, upgrades, cloud migrations) and assess ICFR impact.
- Report control gaps, deficiencies, and remediation status to management and audit committees as needed.
Required Qualifications
- Bachelor’s degree in information systems, Accounting, Finance, Computer Science, or related field.
- 3–6 years of experience in IT audit, ICFR/SOX compliance, IT risk & controls, or related field (public accounting Big 4 experience a plus).
- Strong understanding of COSO framework and COBIT requirements.
- Experience testing ITGCs: access controls, change management, backup/recovery, job scheduling, segregation of duties (SoD).
- Familiarity with ERP systems (e.g. - SAP, Oracle, NetSuite, Microsoft Dynamics) and their control environments.
- Knowledge of IT audit tools and GRC platforms.
- Strong analytical, documentation, and communication skills.
