Senior Analyst – IT Risk Management (SOX)

About the role

The Senior Analyst, IT Risk Management will support Mastercard's SOX compliance program within the Finance organization. Reporting to a US‑based Manager, the role focuses on scoping and evaluating general and application IT controls across global environments.

Key responsibilities

• Execute SOX program components including IT scoping, risk assessment, control testing, remediation recommendations and reporting.
• Assess design effectiveness of internal controls across Mainframe, UNIX/Linux, Cloud and Windows platforms.
• Partner with business owners, IT teams and auditors to address control gaps and ensure high‑quality deliverables.
• Identify efficiencies and opportunities for optimization of financial and operational processes.
• Manage international time‑zone communication and maintain strong project management discipline.

Required profile

• Bachelor’s degree in Accounting, Business, MIS or equivalent; CPA/CA, CISA or similar certification required.
• Extensive knowledge of IT general and application controls and familiarity with SEC/PCAOB regulations, COSO and US GAAP.
• Recent experience providing IT auditing or advisory services in a large, regulated organization.
• Strong written and verbal communication skills with ability to influence and drive change.

Required skills

• COBIT framework
• NIST Cybersecurity framework
• NIST SP 800‑53
• CIS/SANS Top 20 controls
• Mainframe, UNIX/Linux, Cloud and Windows environments
• Audit automation tools (preferred)