
IT GRC SOX Specialist – Regulatory Frameworks
AVEVA
contract
Posted on:
Location Type: Hybrid
Location: Cambridge • United Kingdom
Visit company websiteExplore more
Tech Stack
About the role
- Support the IT GRC team in embedding effective IT governance, risk, and compliance across the organisation.
- Initial focus on SOX IT General Controls (ITGC) and IT Application Controls (ITAC) design, operating effectiveness.
- Partner closely with IT, Security, Finance, Internal Audit, and External Audit to ensure controls are well designed, consistently operated, appropriately evidenced, and continuously improved.
- Drive a pragmatic, audit-ready control environment across core platforms and services (including Oracle and Salesforce).
- Support broader regulatory and assurance initiatives where applicable (e.g. EU AI Act).
Requirements
- Minimum 5 years’ experience in IT audit, IT risk, IT compliance, SOX IT controls, or a combined GRC/assurance role.
- Proven hands-on experience designing, operating, and managing SOX ITGC and, where applicable, ITAC.
- Strong understanding of how IT risks and control failures impact financial reporting and transaction flows.
- Demonstrated experience producing reviewer-ready documentation for audits (risk and control matrices, narratives, process flows, test evidence).
- Hands-on experience managing internal and external audit interactions, including end-to-end evidence coordination.
- Ability to document, explain, and coach others on business process, system mapping, and evidencing expectations.
- Working knowledge of major frameworks and standards such as COSO, COBIT, ISO 27001, and NIST, and the ability to rationalise overlaps.
- Strong understanding of access governance, segregation of duties, privileged access, change management, and IT operations controls.
- Highly effective written and verbal communication skills, with the ability to influence stakeholders across IT, Finance, and Audit.
- Strong Microsoft Office skills, including Outlook, Excel, PowerPoint, Teams, and SharePoint.
Benefits
- Flexible benefits fund
- Emergency leave days
- Adoption leave
- 28 days annual leave (plus bank holidays)
- Pension
- Life cover
- Private medical insurance
- Parental leave
- Education assistance program
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
IT auditIT riskIT complianceSOX IT controlsSOX ITGCITACrisk and control matricesprocess flowstest evidenceaccess governance
Soft Skills
written communicationverbal communicationinfluencing stakeholderscoachingdocumentationexplanationsystem mappingcollaborationorganizational skillsproblem-solving
Certifications
ISO 27001NIST