Risk and Compliance Senior Analyst

Skill required: Risk & Compliance - Sarbanes-Oxley Act (SOX)
Designation: Risk and Compliance Senior Analyst
Qualifications:BTech/Bachelor of Information systems and Management/Bachelors of Information Technology
Years of Experience:5 to 8 years
About Accenture
Accenture is a global professional services company with leading capabilities in digital, cloud and security.Combining unmatched experience and specialized skills across more than 40 industries, we offer Strategy and Consulting, Technology and Operations services, and Accenture Song— all powered by the world’s largest network of Advanced Technology and Intelligent Operations centers. Our 784,000 people deliver on the promise of technology and human ingenuity every day, serving clients in more than 120 countries. We embrace the power of change to create value and shared success for our clients, people, shareholders, partners and communities.Visit us at www.accenture.com
What would you do? You will be aligned with our Risk and Compliance vertical and help us perform compliance reviews, publish reports with actions and provide closure guidance as needed. We design & recommend effective controls to mitigate risks and help service delivery team prepare for upcoming client / external audits. Risk & Compliance involves identifying, assessing, and managing risks to ensure an organization adheres to laws and regulations. This role includes developing risk management strategies, conducting compliance audits, and implementing policies to mitigate risks. It also involves monitoring regulatory changes and ensuring the organization remains compliant. The goal is to protect the organization from legal and financial risks while maintaining ethical standards. United States federal law that set new or expanded requirements for all U.S. public company boards, management and public accounting firms. Assist in implementation of client-designed Sarbanes-Oxley controls into client s financial processes, enterprise resource planning system or supporting technology.
What are we looking for? Qualifications • Education: Bachelor’s degree in Computer Science, Information Systems, Information Technology, or related discipline; master’s degree preferred. • Experience: Experience in internal/external audit, technology risk, IT controls/SOX, application controls (ITAC), cybersecurity, risk & compliance, or related assurance; experience in financial services is a plus. • Technical knowledge: ITGC domains (identity and access management, change management, operations); endpoint security, patch & vulnerability management, Active Directory, network defense, data loss prevention, incident management; familiarity with SDLC and application control concepts. Good to have - exposure to Cloud platforms (AWS, Azure, GCP) and technology transformation programs; experience using data analysis/analytics techniques to support audit testing. • Tools: Proficiency with Microsoft Office (Excel, Word, PowerPoint); familiarity with audit management software and/or data analytics tools preferred. • Certifications (desired): CISA, CIA; ISO 27001 and/or cloud certifications are a plus. Key Responsibilities • Contribute to the technology audit portfolio and risk-based audit plan to ensure appropriate coverage of key risks and controls across infrastructure, security, and applications. • Execute the full audit lifecycle for assigned engagements: planning, walkthroughs, control evaluation, testing, documentation, reporting support, and issue verification/closure validation. • Perform walkthroughs and testing of ITGC and ITAC to assess control design and operating effectiveness; develop and maintain documentation such as process narratives/flowcharts, risk and control matrices (RCMs), and test plans. • Identify and assess inherent risks across technology and security functions; evaluate effectiveness of mitigating controls (e.g., access management, change management, computer operations, patching, SDLC, and key application controls). • Maintain relationships with key technology and application owners; continuously update risk/control assessments through periodic meetings, walkthroughs, and (where applicable) data analytics. • Provide audit perspective on technology transformation initiatives (e.g., modernization programs, cloud migrations, and process automation). • Travel may be required (role dependent).
Roles and Responsibilities: Key Responsibilities • Contribute to the technology audit portfolio and risk-based audit plan to ensure appropriate coverage of key risks and controls across infrastructure, security, and applications. • Execute the full audit lifecycle for assigned engagements: planning, walkthroughs, control evaluation, testing, documentation, reporting support, and issue verification/closure validation. • Perform walkthroughs and testing of ITGC and ITAC to assess control design and operating effectiveness; develop and maintain documentation such as process narratives/flowcharts, risk and control matrices (RCMs), and test plans. • Identify and assess inherent risks across technology and security functions; evaluate effectiveness of mitigating controls (e.g., access management, change management, computer operations, patching, SDLC, and key application controls). • Maintain relationships with key technology and application owners; continuously update risk/control assessments through periodic meetings, walkthroughs, and (where applicable) data analytics. • Provide audit perspective on technology transformation initiatives (e.g., modernization programs, cloud migrations, and process automation). • Travel may be required (role dependent).