IT SOX Testing Analyst

JOB DESCRIPTION

We are seeking a detail-oriented, analytical, and technology-oriented IT SOX Analyst to support our Sarbanes-Oxley (SOX) compliance program, with a strong focus on IT controls, IT risk management, and IT auditing. This position requires hands-on experience in IT SOX testing, IT internal or external audits, and IT General Controls (ITGCs) or IT Application Controls (ITACs), including user access management, change management, and IT operations. Candidates with experience exclusively in financial auditing or accounting, without direct IT audit or IT controls experience, will not meet the core requirements.

The role involves evaluating the design and operating effectiveness of IT controls supporting Internal Controls over Financial Reporting (ICFR), identifying deficiencies, and supporting remediation efforts in collaboration with IT teams, process owners, and auditors. The ideal candidate will also demonstrate strong analytical skills and the ability to leverage data analytics, AI, and emerging technologies to enhance IT audit quality, efficiency, and compliance.

Key Responsibilities

Execute testing of key IT SOX controls in accordance with established testing plans, methodologies, and timelines.

Document testing procedures, evidence evaluated, conclusions, and results in a clear, accurate, and concise manner.

Assess the design and operating effectiveness of IT general controls (ITGCs), IT application controls (ITACs), interfaces, and other technology-dependent controls, as applicable.

Identify, evaluate, and communicate control deficiencies, supported by appropriate evidence and sound analysis.

Collaborate with process owners and control owners to understand control activities, resolve questions, and support remediation efforts.

Participate in walkthroughs and coordinate with Internal Audit, external auditors, control owners, and cross-functional stakeholders.

Maintain complete, accurate, and well-organized documentation to support SOX compliance and audit requirements.

Monitor remediation plans and perform re-testing to validate that identified issues have been appropriately addressed.

Use data analytics and AI-enabled solutions, where appropriate, to improve testing coverage, identify exceptions, and increase audit efficiency.

Stay current on SOX requirements, internal control practices, audit methodologies, data analytics, and relevant emerging technologies.

Experience

Bachelor’s degree in information systems, or a related field and equivalent in experience.

English proficiency at B2+ level or higher, with the ability to collaborate effectively across functions and geographies.

2–5 years of relevant experience specifically in IT SOX testing, IT internal audit, IT external audit, IT risk management, or IT controls assessment. Hands-on experience testing IT General Controls (ITGCs) and/or IT Application Controls (ITACs) is required. Experience exclusively in financial auditing, accounting, or non-IT SOX controls does not meet this requirement.

Experience with audit management tools such as AuditBoard, Workiva, Archer, or similar platforms is preferred.

CPA, CIA, CISA, or a comparable professional certification, completed or in progress, is considered a plus.

Skills

Strong data analytics skills, with the ability to leverage data and AI-enabled solutions to enhance audit effectiveness and drive efficiencies across audit and SOX activities.

Ability to interact professionally and effectively with stakeholders at all organizational levels.

Ability to independently manage multiple competing priorities and complex assignments in a fast-paced, dynamic environment.

Demonstrates a strong sense of urgency, ownership, and accountability, with a commitment to meeting established timelines.

Strong attention to detail and commitment to delivering high-quality work.

Strong written and verbal communication skills, with effective interpersonal and relationship-building capabilities.

Advanced analytical, investigative, and problem-solving skills.

Ability to exercise sound professional judgment, maintain confidentiality, and communicate issues constructively.

Benefits:

This is a hybrid position based in Ultra Park II, Lagunilla (Heredia). On-site presence is required only when necessary, such as for meetings, trainings, or collaborative activities, in alignment with the company’s telework agreement, which currently requires employees to work on-site three (3) days per week)

Private Medical Insurance

Asociacion Solidarista

Life Insurance

Personal Day Off

Note: Only candidates with Costa Rican nationality or valid immigration status will be considered; applicants residing outside Costa Rica will not be considered, and relocation is not available