Job Description Oracle Fusion ITGC Analyst Support Oracle Fusion Financials and ITGC processes in a global enterprise environment Primary Responsibilities • Serve as the CIS division-wide subject matter expert for IT General Controls, SOX compliance, technology controls, and PCAOB audit readiness. • Develop and maintain consistent ITGC policies, standards, control procedures, documentation, and evidence requirements across in-scope CIS applications and technologies. • Partner with application owners, administrators, developers, infrastructure teams, Finance, Internal Audit, and other stakeholders to incorporate compliance by design into systems, integrations, changes, and operational processes. • Configure and administer Fastpath GRC for User Access Reviews, segregation-of-duties monitoring, access-risk analysis, mitigating controls, audit-log reviews, and compliance reporting. • Coordinate periodic access reviews and monitor privileged access, service accounts, segregation-of-duties conflicts, and joiner, mover, and leaver controls. • Oversee controls for system development, change management, configuration changes, production migrations, computer operations, interfaces, batch processing, and audit logging. • Conduct ITGC risk assessments, control walkthroughs, self-assessments, compliance reviews, and evaluations of control design and operating effectiveness. • Identify control gaps, perform root-cause analysis, and coordinate sustainable remediation of deficiencies and recurring exceptions. • Act as the primary CIS liaison with internal and external auditors for ITGC walkthroughs, questionnaires, evidence requests, testing, findings, and remediation. • Maintain an audit-ready documentation library, including control narratives, risk and control matrices, access reviews, change evidence, test results, SOC reports, bridge letters, and remediation records. • Review third-party assurance reports and coordinate responses to exceptions, complementary user-entity controls, and other service-provider risks. • Develop and deliver division-wide training, job aids, and guidance on SOX, ITGC, access governance, change controls, audit evidence, and control-owner responsibilities. • Provide CIS leadership with reporting on audit readiness, control execution, deficiencies, remediation progress, and emerging compliance risks. • Stay current on SOX Section 404, PCAOB, COSO, COBIT, ITGC, identity governance, cloud controls, and public-company compliance requirements. Requirement • Typically requires 4–6 years of experience in IT audit, IT risk and compliance, SOX, ITGC, application controls, financial systems, or a related technology-control function. • Demonstrated experience designing, operating, assessing, or auditing ITGCs across enterprise applications and supporting technologies. • Strong knowledge of access management, privileged access, segregation of duties, change management, system development, computer operations, interfaces, configuration management, and audit logging. • Experience supporting SOX Section 404 compliance or audits of internal control over financial reporting. • Experience conducting risk assessments, control walkthroughs, self-assessments, control testing, deficiency evaluations, and remediation validation. • Experience coordinating with internal and external auditors and preparing complete, reliable, and timely audit evidence. • Experience developing policies, procedures, control narratives, risk and control matrices, testing documentation, and audit workpapers. • Familiarity with GRC, identity-governance, access-certification, audit-management, or compliance-monitoring applications. • Understanding of SOC reports, bridge letters, complementary user-entity controls, and third-party assurance requirements. • Strong analytical, project-management, communication, and stakeholder-influencing skills. • Ability to work independently and coordinate compliance activities across global, cross-functional teams. • Bachelor’s degree in Accounting, Finance, Information Systems, Computer Science, Cybersecurity, Information Technology, or a related field. • Equivalent combinations of education, training, professional certifications, and relevant experience may be considered. • You’re curious, passionate, authentic, and accountable. These are our values and influence everything we do. Mandatory Technical Skills • CISA, CIA, CPA, CRISC, CISM, CISSP, CGEIT, or a comparable audit, risk, security, or compliance certification. • Experience supporting PCAOB-regulated audits in a public company or public-company-readiness environment. • Experience in IT audit, technology risk, or controls advisory with a major accounting or professional-services firm. • Hands-on experience administering Fastpath GRC or a similar enterprise GRC platform. • Experience with Oracle Fusion Cloud ERP, Oracle EPM Cloud, Workday, Boomi, Microsoft Azure, Active Directory, databases, data warehouses, or other enterprise technologies. • Experience with identity governance, role-based access, privileged-access management, service accounts, and joiner, mover, and leaver controls. • Experience evaluating automated controls, system-generated reports, interfaces, data integrity, and information produced by the entity. • Working knowledge of SQL, reporting tools, data analytics, or continuous-control monitoring. • Experience supporting multinational technology environments, shared services, subsidiary audits, or geographically distributed teams. • Demonstrated ability to train and guide technical and nontechnical stakeholders on SOX and ITGC responsibilities. • Strong customer-service orientation with the ability to challenge ineffective practices and escalate unresolved compliance risks.