Job Description & Details
This is a hands-on IT SOX analyst consultant gig embedded within a direct banking client right in midtown Manhattan. You will spend your days bridging the gap between rigorous regulatory requirements and fast-moving tech teams, keeping the external auditors happy without driving the engineers crazy.
What You'll Actually Be Doing
You will be deep in the trenches of IT general controls (ITGCs), coordinating testing, reviewing evidence, and managing the constant stream of requests from external auditors. Expect to spend a lot of time dissecting audit requests, translating technical requirements for control owners, and chasing down documentation for managed change, operations, and access controls. You are essentially the project manager and quality control filter for everything related to financial systems compliance.
The Core Tech Stack
While you won't be writing production code, you need a rock-solid grasp of IT frameworks like the 2013 COSO framework, NIST, COBIT, and SOC reports. The hiring team is relying on your deep understanding of the Sarbanes-Oxley Act and SEC guidance to quickly spot control weaknesses, design deficiencies, and evidence gaps before the auditors flag them.
Interview Expectations
When you sit down with the hiring manager, expect them to test your ability to handle difficult stakeholders and pushback from engineering teams regarding compliance burdens. They'll likely ask you to describe a time you uncovered a significant ITGC deficiency and how you guided the engineering leads to remediate it without causing business friction; they are secretly testing your diplomacy and technical communication skills. Another classic question will focus on how you evaluate the design effectiveness of automated controls versus manual workarounds in a modern banking infrastructure.
Application Advice
Make sure your resume screams compliance, banking or financial services background, and direct SOX testing experience. Explicitly list out keywords like ITGC, COBIT, NIST, CISA, and COSO framework so you easily clear the initial ATS filters. Highlight your project management and cross-functional leadership skills, as this role requires convincing busy tech teams to prioritize documentation and evidence gathering.