Finance IT-Controls Assurance Analyst

Job Purpose

A Finance IT-Controls Assurance Analyst Candidate with an Internal Controls & Sarbanes-Oxley Compliance (SOX) knowledge and IT auditing experience is to join the Controller’s Organization within the Finance, Strategy & Development service line in Saudi Aramco.

The Controller’s Organization acts as Saudi Aramco’s primary representative for financial and income tax reporting to management by producing the Company’s consolidated financial statements, subsidiaries’ financial statements, and other management reports. The Controller Organization actively seeks compliance of all organizations regarding controls over financial reporting and generally achieving good corporate governance throughout the Company.

Responsibilities

Candidate will be required to perform the following:

Implement internal controls over financial reporting (ICFR) standards, including, but not limited to, COSO internal control framework and Sarbanes-Oxley regulations to achieve compliance. Plan, develop, and coordinate execution of all phases of SOX compliance. Perform walkthroughs to identify/validate key controls including entity-level, IT general and automated process level controls.  

Develop test procedures, coordinate execution of testing, and reporting of results to Management. Develop and update key controls documentation, including process flowcharts, process narratives, risk and controls matrices as well as evaluating and assessing the impact of new systems or major process changes on the internal control system.

Provide advice in respect of handling control deficiencies and related remediation plans. Evaluate and analyze data pertaining to information systems functions for SOX compliance. Able to understand, document, and test complex business and IT processes. Understanding of risk management standards and approaches to conduct annual risk assessment and scoping activity for SOX program.

Introduce appropriate automation to streamline management and reporting related to SOX program. Contribute towards training and development of content and resources for knowledge sharing related to SOX program.

Involve in and contribute to other ad-hoc projects as they may arise. Assist in responding to internal and external audit recommendations and implementing corrective action, prepare monthly and quarterly reports for management reporting. Keep abreast with latest SEC regulations, PCAOB pronouncements, and other SOX related updates.

Education & Experience Requirements

A bachelor’s degree in Computer Science or its equivalent and professional competencies evidenced by professional certifications such as CISA, CRISC, CISSP, CIA, and or accounting related qualification is highly desirable. Continuing professional education such as membership in a professional association is required.

The experience in relevant industries, which may include practice in public accounting, recent SOX compliance experience in a publicly listed company and /or SOX (Sarbanes-Oxley) consulting experience in a Big 4 advisory firm. It may also include knowledge of auditing principles and standards, audit follow ups, PCAOB’s standards such as AS5 (ICFR), Internal Controls frameworks (e.g. COSO). Intimate knowledge of SAP systems, controls and related cybersecurity processes including automated systems controls supporting business processes in SAP. 

Candidate has to be able to conduct IT risk assessment and scoping, detailed IT process and control design walkthroughs and meticulous testing of controls from a SOX standard and able to prepare preliminary findings, analyze alternative approaches and to demonstrate the capability to make presentations or lead meetings, including at the executive level. Proficiency in both oral and written English is required and SAP or equivalent ERP systems experience is highly desirable.