IT SOX Control Analyst

About the role

The IT SOX Control Analyst ensures that robust IT and finance controls are in place across the global Elsevier Technology organization, enabling compliance with Sarbanes‑Oxley (SOX) requirements. You will work closely with internal and external auditors, business owners, and technology teams to monitor, test, and improve control effectiveness.

Key responsibilities

• Perform audits of SOX controls, including process walkthroughs and testing of IT General Controls (ITGC) and IT Application Controls (ITAC).
• Assist business units with ITAC testing and follow up on remediation actions to close identified deficiencies.
• Maintain documentation and evidence of controls in Archer and support status reporting to senior management.
• Support simplification and standardisation of SOX controls and contribute to the One Fusion project readiness for 2025.
• Review third‑party SOC 1 reports and coordinate with external and internal auditors.
• Develop training materials and conduct sessions for control owners to promote SOX awareness.
• Research best practices and emerging requirements, and handle ad‑hoc duties as assigned.

Required profile

• Minimum 4 years of experience in IT audit or assessment, including SOX testing of ITGC and ITAC.
• Experience with major ERP systems such as Oracle.
• Degree‑level education in Engineering, Computer Science or related field; CISA certification and Big 4 experience are preferred.
• Prior experience in a technology or cloud‑focused environment.
• Ability to work UK shifts and collaborate across global teams.

Required skills

• IT General Controls (ITGC) testing
• IT Application Controls (ITAC) testing
• Oracle ERP
• Archer control‑management platform
• SOC 1 report analysis
• CISA certification (preferred)

What we offer

• Healthy work‑life balance with wellbeing initiatives
• Shared parental leave, study assistance, and sabbatical options
• Opportunities to work in a collaborative, global compliance team