Senior Compliance & Internal Controls Analyst recruitment
The position will contribute to CME’s compliance with legal requirements of the Sarbanes-Oxley Act of 2002 under Sections 302 404. Specifically, the senior analyst will perform risk assessments, scoping, meet with control owners to discuss updates to process mapping and control environment documentation, testing of the design and operating effectiveness of key controls, gap remediation, and preparation of periodic status reports. This position will report to the Director, Compliance Controls. This role will provide exposure to all levels of the organization.
Responsibilities:
- Work with control owners to recommend courses of action and remediation plans where control deficiencies have been discovered and gain consensus from all stakeholders.
- Assess effect of business process changes on the control environment and implement changes to compliance program accordingly.
- Respond to situations involving business areas that are not in compliance with internal control documentation, certifications and control certification requirements.
- Be aware of and assist the team in responding to new regulatory requirements
- Respond and understand requirements with respect to their work required for their annual attestation and resolve conflicts.
- Assist in determining materiality and identify significant business applications to be included in Sarbanes-Oxley Section 302/404 scope on a quarterly basis or as needed
- Determine appropriate level of documentation required for business applications based on criteria agreed upon with CME management and the external auditors.
- Make initial assessment whether internal control gaps are deemed a “significant deficiency”, “material weakness”, or “inconsequential”.
- Document and provide initial assessment of remediation plans
- Conclude as to the adequacy of controls performed in their assigned areas
- Determine when to escalate unresolved issues for corrective action.
Requirements:
- BA/BS Accounting, Business Administration, Finance or related field.
- Combination of public or corporate accounting and internal audit experience with no less than 4 years experience in total.
- Familiarity of financial, operational computer controls within the COSO and COBIT frameworks.
- Understanding of Sarbanes-Oxley documentation and attestation requirements.
- Strong project management skills.
- Proficient in developing process narratives, flowcharts and root cause analyses.
- Ability to work with individuals at all levels within and outside the company
- Effective presentation skills
- CPA, CISA, CIA each or in combination would be preferred
- Microsoft Professional Office software such as Word, Access, Excel, Visio, PowerPoint, and Outlook.
- Sarbanes-Oxley Sections 302/404 software tool – Trintech experience a plus.
- ERP systems such as PeopleSoft.
A. Scoping
- Assessment of risks and their relevant financial statement impact for assigned business processes
- Assessment of materiality to determine the business processes and technology areas that are to be included within SOX Documentation Design Assessment
- Maintenance of internal control documentation resulting from changes identified through current audit and compliance processes
- Assessment of the design effectiveness of all in-scope areas
- Identification and mapping of dependent general computer controls that are existent within the in-scope business processes
B. Compliance Testing
- Implementation and execution of SOX testing that meets the requirements of CME and Ernst Young.
C. Gap Identification Tracking
- Identification, documentation and tracking of internal control deficiencies and remediation.
D. Certification / Risk Assessment
- Execution and support of the control owner tier 302 certification
- Assessment and certification of entity level controls on an annual basis
- Coordination, execution and support of the section 404 annual report on internal control
- Quarterly execution of risk assessment and analysis of results