Job Description
POSITION- ITGC COMPLIANCE MANAGER LOCATION- REMOTE WITHIN UNITED STATES
The SOX and ITGC Compliance Manager will have primary responsibility for ensuring the effectiveness of all IT General Controls (ITGCs) and application controls related to Business Technology. The manager will act as the primary point of contact between IT and internal/external auditors to provide leadership in managing auditing activities, requests and developing responses to audit findings, leading to remediation of audit findings. The role will also work closely with accounting business partners to ensure that SOX controls that involve business systems are implemented and operating effectively.
KEY CHARACTERISTICS:
• Sound understanding of security and control principles including logical access controls, change control, least privilege, segregation of duties, computer operations, network security, vulnerability management, and secure coding • Broad technical understanding of data management platforms (e.g., SAP, PeopleSoft, Oracle, Microsoft SQL Server, etc.) and associated data security controls • Strong technology acumen and the ability to assess data privacy gaps in products/services design
RESPONSIBILITIES/WHAT YOU WILL BE DOING:
• Provide quality assurance of all IT General Controls through assessment, walkthroughs, and audits to ensure operational effectiveness of those controls. • Monitor the control environment and ensure that controls are operational and in-line with established policies and procedures, and controls methodology • Identify risks and gaps and facilitate remediation to address observations raised in internal and external audits • Provide risk metrics to management regarding audit performance and findings • Assist control owners with root cause analysis and track risk management action plan progress • Guide efforts to create common control framework and uniform compliance reporting standard • Stay up to date on changes to systems and applications and provide guidance on related controls • Performing examination of IT General controls and application controls to determine design and operational effectiveness • Conducting IT controls management testing of controls independent of the audit schedule to save time during audits • Identifying and tracking assessment/audits using performance metrics • Implementing and supervising the issue tracking and resolution process • Reviewing the audit assessments conducted by both internal and external audit teams • Collaborating with both internal and external auditors • Reviewing third-party vendor attestation and audit reports, and providing feedback to business leaders and risk owners • Provide relevant awareness training to control owners
Qualifications
QUALIFICATIONS/YOUR BACKGROUND:
WHAT YOU SHOULD HAVE • Bachelor's Degree in Business, Accounting, Information Technology, or other quantitative discipline • 10+ years of broad compliance or legal experience • 5+ years of audit/assessment experience with SOX • Experience with common information security management frameworks, such as International Organization for Standardization (ISO) 2700x, ITIL, CSC20, COBIT, CIS Controls and National Institute of Standards and Technology (NIST) frameworks • Experience with project management best practices
PREFERRED REQUIREMENTS • Certified Information Security Auditor (CISA) • PMI Project Management Professional (PMP) • Experience in working with SOX, IcFR and internal control design and operations from a Finance and Business Technology perspective • Familiarity with common enterprise and web application technologies • Strong analytical and time management skills • Ability to maintain a high degree of confidentiality
Additional Information
All your information will be kept confidential according to EEO guidelines.
#LI-YC2
WHAT YOU CAN EXPECT FROM US:
WHY ZSCALER? People who excel at Zscaler are smart, motivated and share our values. Ask yourself: Do you want to team with the best talent in the industry? Do you want to work on disruptive technology? Do you thrive in a fluid work environment? Do you appreciate a company culture that enables individual and group success and celebrates achievement? If you said yes, we’d love to talk to you about joining our award-winning team. Additional information about Zscaler (NASDAQ: ZS ) is available at https://www.zscaler.com.
Zscaler is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.