GRC Analyst – J-SOX & ITGC

We are seeking an analytically driven GRC Analyst with 2 to 5 years of experience in experience in IT Audit, Internal Audit, Risk Management, SOX / J-SOX, or GRC functions. Experience within Banking, Financial Services, FinTech, Manufacturing, Automotive, or other regulated industries preferred. In this role, the candidate will bridge financial regulations and corporate IT governance by evaluating controls under J-SOX requirements. The primary focus will be validating internal controls and assessing Information Technology General Controls (ITGC) across systems executing core financial transactions. This position requires a strong understanding of banking or finance workflows and the regulatory expectations governing financial data processing.

Roles and Responsibilities

• Financial Sector J-SOX Compliance: Lead J-SOX testing, documentation, and operational analysis of financial business processes and technical workflows.

 

• High-Risk ITGC Auditing: Evaluate IT General Controls across critical banking and financial IT infrastructures, including stringent user access management (segregation of duties), strict change management procedures, and rigorous disaster recovery configurations.

 

• Financial Data Governance: Verify controls over data integrity, financial reporting accuracy, and secure processing structures, ensuring alignment with SOX / J-SOX, COSO, COBIT, GLBA, GDPR, and applicable local banking data mandates.

 

• Audit Lifecycle and Stakeholder Coordination: Facilitate walkthroughs, maintain Risk & Control Matrices, coordinate with system owners, process owners, HR, infrastructure teams, and third-party vendors, and track control gaps and remediation activities.

 

• TOD / TOE Testing and Workpaper Documentation: Perform Design Effectiveness and Operating Effectiveness testing of ITGCs and business process controls, including evidence testing, validation of control attributes, control performance evaluation, workpaper preparation, and J-SOX-aligned documentation of test results.

 

• External Audit Integration: Act as an operational interface for external oversight teams, regulatory bodies, and global auditors during formal internal and external testing cycles.

Required Qualifications & Experience

• Experience: 2 to 5 years of experience directly executing IT Audit, Internal Audit, J-SOX or GRC workflows within a Bank, Fintech, or insurance institution.
• Framework Expertise: Practical knowledge of J-SOX regulations, COSO internal control frameworks, and COBIT standards for technical infrastructure management.
• Core Systems Exposure: Hands-on exposure auditing ERP, lending, financial reporting, core banking, or other business-critical applications supporting financial transaction processing.

Ideal Certifications

• CISA (Certified Information Systems Auditor)
• CRISC (Certified in Risk and Information Systems Control)
• CISM (Certified Information Security Manager)
• ISO/IEC 27001 Lead Auditor or Lead Implementer