Business Controls Analyst - Enterprise Systems

The Business Controls team is one of Red Hat’s primary risk management teams and mitigates risk by implementing and maintaining a framework of internal controls. We are seeking a Business Controls Analyst - Enterprise Systems to ensure compliance with our standards and regulations, including Sarbanes-Oxley, GDPR etc. The role involves assisting in the initial compliance and ongoing testing, monitoring, and documentation related to SOX sections 302 and 404. The analyst will conduct SOX reviews, assess risks, identify deficiencies, and collaborate with internal departments to address issues. The role also includes communicating audit results, preparing documentation, and facilitating internal training on SOX compliance.

• Assess IT risk and advise on necessary controls needed to address that risk through collaboration with IT, and other key stakeholders.
• Support compliance assessments across a broad range of programs, including Sarbanes-Oxley (SOX), Payment Card Industry Data Security Standard (PCI DSS), SOC 1 (Service Organization Control) report, IBM’s ASCA and other assurance programs as needed (e.g. GDPR).
• Collaborate with technology compliance team members to identify continuous compliance process improvements.
• Collaborate and coordinate with Internal Audit, External Audit, and IBM audit teams on assessments and control remediations.
• Knowledge of the following IT process areas: Change Management, Logical Access, IT Operations, and Interfaces for multiple platforms and applications.
• Experience in testing and operating effectiveness reviews, including executing, reporting, and developing remediation recommendations.
• Support validation of Internal and External Audit findings and partner with stakeholders on responses, ensuring that remediation plans align with IT Security and Architecture direction.

• At least 5 years of work experience in IT SOX compliance and/or IT auditing
• Holding certifications such as CISA, CIA, CPA
• Knowledge of current technological trends and developments
• Bachelor's Degree in Accounting, Business, Information Technology or Computer Science preferred.
• Proactive, strategic approach to problem-solving and control execution
• Strong analytical, interpersonal, and communication skills
• Demonstrated ability to collaborate with a diverse set of internal and external stakeholders, including senior leaders, business and functional representatives, and vendors/consulting partners.
• Strong collaboration skills and a demonstrated ability to approach technical and business solutions in a consultative manner.

#LI-NG1