Supporting IT compliance activities in the US, the IT Senior Compliance Analyst acts as the point of contact for business, IT colleagues, and internal/external auditors for the organization's IT general controls. They will be responsible for overseeing and coordinating all phases of the audit lifecycle related to Crawford's SOC portfolio and Sarbanes-Oxley (SOX) obligations: scheduling and leading walkthroughs, coordinating with internal and external stakeholders, obtaining audit requests, ensuring compliance with internal policies, industry standards, and regulatory requirements, and leading remediation efforts for any identified exceptions as part of the audits.
Bachelor's degree in Accounting, Information Systems, or a business-related field required.
Advanced degree in Accounting, Finance, Business Administration, or Information Systems is highly desired.
Three years of auditing, accounting, management or related experience.
Strong knowledge and application of US GAAP, SOX, COSO and risk-assessment practices, internal controls, and International Standards for the Professional Practice of Internal Auditing.
Strong experience with US-based compliance frameworks, including SOX, SOC1, and SOC2
Strong project management abilities as well as excellent oral and written communication skills, both verbal and written. Excellent business report writing skills
Exceptional analytical skills with good attention to detail
Excellent Interpersonal skills
A relevant IT security / risk / compliance certification (desired, but not required) (CPA, CISA, CISM, CISSP, CRISC or similar, for example)
Public accounting experience is highly desired
The ability to work remotely, with other globally-based remote team members to complete projects within the required deadlines
Pursues professional self-development and stays abreast of emerging trends and leading practices in information technology, auditing, risk management, accounting and auditing fields through continuing education, seminars, review of professional journal and self-study programs in the areas of management, accounting, auditing, and information technology.
Certification as a CPA or CISA is highly desired.
#LI-DV1
Oversees the entire audit lifecycle with both our Internal and External Auditors, including documentation gathering, walkthrough set up, facilitating remediation, and coordinating and liaising with key stakeholders
Coordinates User Access Reviews (UARs) for our in-scope SOX, SOC1, SOC2, and "Crown Jewel" systems, including follow-up with reviewers and risk reviews, and possess expertise in the audit "accuracy and completeness" requirements and will ensure those are adhered to as part of the UAR process
Consults with key stakeholders on SOX, SOC1, and SOC2 related questions and initiatives; provide feedback in accordance with compliance framework requirements
Translates audit "speak" into technical requirements for our IT stakeholders and translating technical IT "speak" into requirements based on audit frameworks
Organizes and oversee multiple compliance-related projects with competing deadlines. Prioritize tasks and projects daily. Help oversee offshore resources to complete projects and deadlines on time
Possesses the ability to oversee and organize multiple projects with competing deadlines and the ability to work independently and proactively