Risk and Compliance Senior Analyst

Skill required: Risk & Compliance - Sarbanes-Oxley Act (SOX)
Designation: Risk and Compliance Senior Analyst
Qualifications:BTech/MTech
Years of Experience:5 to 8 years
About Accenture
Accenture is a global professional services company with leading capabilities in digital, cloud and security.Combining unmatched experience and specialized skills across more than 40 industries, we offer Strategy and Consulting, Technology and Operations services, and Accenture Song— all powered by the world’s largest network of Advanced Technology and Intelligent Operations centers. Our 784,000 people deliver on the promise of technology and human ingenuity every day, serving clients in more than 120 countries. We embrace the power of change to create value and shared success for our clients, people, shareholders, partners and communities.Visit us at www.accenture.com
What would you do? You will be aligned with our Risk and Compliance vertical and help us perform compliance reviews, publish reports with actions and provide closure guidance as needed. We design & recommend effective controls to mitigate risks and help service delivery team prepare for upcoming client / external audits. Risk & Compliance involves identifying, assessing, and managing risks to ensure an organization adheres to laws and regulations. This role includes developing risk management strategies, conducting compliance audits, and implementing policies to mitigate risks. It also involves monitoring regulatory changes and ensuring the organization remains compliant. The goal is to protect the organization from legal and financial risks while maintaining ethical standards. United States federal law that set new or expanded requirements for all U.S. public company boards, management and public accounting firms. Assist in implementation of client-designed Sarbanes-Oxley controls into client s financial processes, enterprise resource planning system or supporting technology.
What are we looking for? • Education: Bachelor’s degree required in Computer Science, Information Systems, or related discipline; master’s degree preferred. • Experience: 5–6+ years in internal/external audit, technology risk, IT controls/SOX, cybersecurity, or related assurance; experience in financial services is a plus. • Core skills: Participation in the full audit lifecycle; risk-based planning; strong analytical, writing, and stakeholder management skills; ability to deliver clear messages and escalate appropriately; effective time/project management and teamwork. • Technical knowledge: Demonstrated technical agility in at least four of the following areas: operating systems, ITIL services, identity and access management, endpoint security, patch management, Active Directory, network defense, data loss prevention, and security incident management. • Preferred: ITGC and ISO 27001 knowledge; cloud audit exposure (AWS, Azure, GCP); experience using data analysis/analytics tools. • Contribute to the Core Technology audit portfolio and risk-based audit plan to ensure coverage of key risks and controls. • Execute the full audit lifecycle for assigned engagements: planning, walkthroughs, control evaluation, testing, documentation, reporting support, and issue verification/closure validation. • Identify and assess inherent risks across technology and security functions; evaluate design and operating effectiveness of mitigating controls (including ITGC, security, and operational controls). • Coordinate globally to support delivery of the Core Technology audit plan, including testing, workpaper review, reporting, and follow-up.
Roles and Responsibilities: Technology Audit (Core Technology / IT Risk) – Internal Audit Group (IAG) Overview Individual contributor role within IAG executing risk-based technology audits across Core Technology, Technology Risk, and Information Security. Delivers assigned audit work end-to-end (planning support, walkthroughs, control design/operating effectiveness testing, documentation, and issue validation) and partners with global stakeholders to assess key risks and control effectiveness, including in cloud migration and IT modernization environments. Key Responsibilities • Contribute to the Core Technology audit portfolio and risk-based audit plan to ensure coverage of key risks and controls. • Execute the full audit lifecycle for assigned engagements: planning, walkthroughs, control evaluation, testing, documentation, reporting support, and issue verification/closure validation. • Identify and assess inherent risks across technology and security functions; evaluate design and operating effectiveness of mitigating controls (including ITGC, security, and operational controls). • Coordinate globally to support delivery of the Core Technology audit plan, including testing, workpaper review, reporting, and follow-up. • Maintain strong relationships with key technology stakeholders; continuously update risk/control assessments through periodic meetings, walkthroughs, and data analytics. • Monitor and provide audit perspective on technology transformation initiatives (e.g., IT modernization programs and cloud migrations). • Communicate audit results and key messages clearly to senior management and, where applicable, regulators; advise on emerging industry and regulatory topics that may impact coverage. • Contribute to team effectiveness through knowledge sharing, informal coaching, timely feedback, and sound judgment (including escalation when needed). • Some travel may be required.