Summary: The IT Audit Controls SME for SOX Privileged Access Management will provide compliance oversight and quality review for Privileged Access Controls within a global company's SOx Remediation programme. This role requires strong leadership and hands-on testing skills to validate the execution of controls associated with Privileged Access Management. The position is remote and is offered on an 8-month contract basis, classified as inside IR35. Successful candidates will need to set up via an Umbrella Company or PAYE.

Key Responsibilities:

• Provide auditor level oversight and support on the execution of Privileged Access Management controls
• Perform evidence review for the Privileged Access Control execution to ensure all necessary data captured and compliant for in scope SOX PAM controls
• Collaborate and guide PAM Control Operations team on the execution of the control
• Work closely with control owner and operations team to ensure remediation and impact assessment activities are completed timely and appropriately
• Liaise with both internal and external auditors during testing phases and ongoing throughout the year

Key Skills:

• Significant experience in IT general controls (ITGCs) testing for Sarbanes Oxley or general IT audit
• Proven capability in Technology Risk Management and Internal Controls
• Experience of working with external auditors on control and SOX testing
• Sense of urgency and ability to meet deadlines and prioritise appropriately
• Experience in Identity Access Management, specifically Privileged Access Management processes and tools
• Experience at a consultancy or in-house SOX testing team (preferred)
• CyberArk Privileged Access Management solution experience (preferred)
• Experience in auditing Infrastructure controls, such as Windows OS, Linux OS, SQL, Oracle Database technologies (preferred)
• Azure Cloud and SailPoint Identity Security Cloud experience (preferred)
• CRISC, CISA or other relevant qualification is desirable (preferred)

Salary (Rate): undetermined

City: London

Country: UK

Working Arrangements: remote

IR35 Status: inside IR35

Seniority Level: undetermined

Industry: IT