Senior Associate - IT SOX Compliance

Be a part of our mission! As a world leader in creating comfortable, sustainable, and efficient climate solutions for buildings, homes and transportation, it's our responsibility to put the planet first. For us at Trane Technologies, and through our businesses including Trane® and Thermo King,  sustainability is not just how we do business—it is our business.  Do you dare to look at the world's challenges and see impactful possibilities?  Do you want to contribute to making a better future?  If the answer is yes, we invite you to consider joining us in boldly challenging what's possible for a sustainable world.

Learn about our benefits designed for you to Thrive at work and at home. 

We boldly go.

Where is the work:

What's in it for you:
The Senior Associate - IT SOX Compliance is an integral member of a global SOX Compliance & Internal Controls team that delivers the annual IT SOX program for the inscope key SOX applications, servers and databases. This role upholds the mission of the Assurance & Advisory Services department by ensuring a secure IT General and Automated controls environment, robust risk management practices, and regulatory compliances. As a trusted partner, the Senior Associate fosters client relationships, collaborates with fellow team members, assists & work with External Auditors, and contributes to the strategic growth of the team. The candidates drive and execute IT Control testing both for interim and roll- forward engagements at Application and Operating System layer, driving the enhancement of IT controls and overall IT governance, while supporting other IT SOX related reviews as needed to assess emerging threats and evolving IT regulatory risks. 

Where is the work:  

From Monday to Thursday, work onsite with your colleagues at IBC Knowledge Park, Bannerghatta Road, Bangalore. On Fridays, choose your work location, balancing what your work requires  

What you will do:

·         Drive and executes IT SOX 404 assessments, including risk assessment, walkthroughs, and testing of IT General Controls (viz. Access Management, Logical Security Settings, Change Management, and Computer Operations)

·         Work in a collaborative team environment and contribute to the successful delivery of IT SOX Compliance and Internal Controls review engagements, including preparing high-quality, accurate, well-supported documentation, and reports.

.          Evaluate the design and operating effectiveness of ITGC’s controls. Maintain up-to-date documentation, IT SOX Narratives, and process flowcharts.

·         Drive and execute the IT General control testing around inscope Servers and Databases around Privilege User Access Review, Logical Security Settings, Back-up scheduling and Monitoring, Back-up Integrity, etc.

.         Contribute and support the IT Automated Control testing, assess the completeness and accuracy of Annual User Access review at Enterprise level

·         Perform thorough reviews to analyze the adequacy of IT controls, internal controls over financial reporting, compliance with corporate standards, policies, and regulatory requirements (e.g., SOX, SOC 1/2, ISO, NIST).

·         Prioritize and assign tasks to ensure effective use of team resources and completion of work according to schedules and engagement objectives.

·         Assist in the evaluation of system implementations/upgrades by performing the System Development Life Cycle (SDLC) reviews.

·         Evaluate the IT control environments of the newly acquired entities to ensure adequate controls are in place to support the complete and accurate financial reporting.

·         Present findings to management at the conclusion of engagements, discuss deficiencies, and recommend remediation actions and opportunities for improvement.

·         Consult with IT clients to redesign/re-engineer processes; identify opportunities for optimizing operational efficiencies, strengthening internal controls, and reducing overall IT and Non-IT risk.

·         Opine on the adequacy of remedial actions taken to correct deficiencies and assist with issue closure processes.

·         Maintain adequate and current technical knowledge in areas such as IT general controls, business process controls, cybersecurity, and other areas as required.

·         Communicate technical findings clearly to both technical and non-technical stakeholders.

·         Respond to complex, escalated inquiries and ensure outstanding IT Audit & SOX issues are cleared.

·         Collaborate with other functions of global Assurance & Advisory Services and support ad-hoc activities and engagements as needed.

What you will bring:

·         Bachelor’s degree in information technology, Management Information Systems, Computer Science, Chartered Accountant, or related IT graduates

·         Certified Information Systems Auditor (CISA) certification preferred.

·         Minimum of 6 years’ combined experience in IT SOX Compliances, with strong exposure to SOX compliance framework, internal controls review, IT risk and governance.

·         Knowledge of relevant IT domains including automated controls testing, system development lifecycle, SOC-1 report review, and identity and access management at Application and Operating System level (i.e., Servers and Databases).

·         Demonstrated ability for independent thinking and multi-tasking under aggressive deadlines with a high degree of accuracy in a complex “matrix” environment.

·         Proven ability to plan proactively, anticipate issues, and have excellent problem resolution records with little or no input or assistance.

·         Proficiency in computer applications including MS Word, MS Excel, and MS Outlook.

We offer competitive compensation and comprehensive benefits and programs. We are an equal opportunity employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, pregnancy, age, marital status, disability, status as a protected veteran, or any legally protected status.