Intermediate IT Access Controls Analyst to optimize access-related IT General Controls (ITGCs)

Our large enterprise client is seeking an Intermediate IT Access Controls Analyst to optimize access-related IT General Controls (ITGCs) across enterprise platforms

Join a large-scale enterprise environment supporting IT Risk, Compliance, and Audit initiatives across critical business applications and technology platforms. This role focuses on reviewing and optimizing access-related ITGCs, supporting audit activities, improving control documentation, and strengthening the overall control environment. The position works closely with Internal Audit, Compliance, Cybersecurity, Application, and Infrastructure teams on control execution, evidence collection, and access governance activities.

6-month initial contract (possibility of extension)

Remote contract following MST hours of operation

Must Haves

• 3+ years of Access Controls, Access Provisioning, RBAC (Role-Based Access Controls), IAM (Identity and Access Management), and similar experience
• Experience supporting IT General Controls (ITGCs), audit activities, control testing, remediation planning, and evidence collection
• Experience with user provisioning, deprovisioning, access reviews, and privileged access management
• Experience with ServiceNow, Active Directory, Azure AD (Active Directory), or Microsoft Entra ID
• Familiarity with SAP and/or Oracle ERP platforms

Nice to Have

• Knowledge of SOX, ITGCs, COBIT, NIST Cybersecurity Framework, and related governance and control practices
• Experience working with Internal Audit, External Audit, Compliance, or Risk Management teams
• Experience maintaining process documentation, control narratives, risk and control matrices, and audit evidence

Responsibilities

• Review and document access-related IT General Controls (ITGCs) across business applications and technology platforms
• Assess existing controls to identify duplication, inefficiencies, and standardization opportunities
• Support optimization and rationalization of the ITGC control environment
• Update control narratives, process documentation, control matrices, and related governance artifacts
• Work with control owners to ensure controls are clearly defined, consistently executed, and supported by evidence
• Identify opportunities to automate control execution, monitoring, and evidence collection
• Collaborate with Cybersecurity, IT Compliance, Internal Audit, Application, and Infrastructure teams to gather requirements and validate findings