Senior Internal Controls Analyst

Department: Internal Control Schedule: Hybrid (3 days on-site) Travel: 15%-20%

The Senior Internal Controls Analyst supports the ICFR Compliance function by assessing, documenting, testing, and enhancing the Company’s internal control environment, including financial, operational, and Information Technology General Controls (ITGC). The Senior Internal Controls Analyst supports process documentation, walkthroughs, control testing, IT and application control scoping, issue identification, remediation follow-up, and continuous improvement initiatives across financial, operational, ICFR, and IT control areas, while providing guidance to less experienced team members.

KEY RESPONSIBILITIES

• Stakeholder Engagement & Planning: Support the development of relationships with management, process owners, and cross-functional stakeholders (including IT) to promote collaboration, accountability, and timely execution of internal control activities.
• Process Understanding, Risks & Key Controls: Develop a detailed understanding of processes currently operating within each location or business area, including related risks, key controls, control owners, systems, interfaces, and opportunities for improvement.
• Walkthrough Documentation: Document walkthroughs of financial, operational, and IT-dependent processes, including key controls, systems, interfaces and reports used to execute or evidence controls.
• Internal Control Reviews & Testing: Lead and perform internal financial, operational, and IT control reviews, audits, and testing across Company business areas and locations in accordance with the Internal Control plan.
• IT General Controls (ITGC) & IT Scoping: Support IT scoping efforts to identify in-scope applications, systems, and infrastructure supporting financial reporting; assess and test ITGCs across access management, change management, and computer/IT operations; partner with IT process owners to document IT dependencies and evaluate the design and operating effectiveness of IT and application controls.
• Issue Identification & Recommendations: Identify insufficient documentation, process gaps, or control deficiencies (including IT-related deficiencies); recommend improvements to controls or supporting documentation.
• Monitoring & Remediation Follow-Up: Support the monitoring and follow-up on control issues, audit findings, and project observations, with a significant focus on remediation tracking, status updates, and validation of corrective actions.
• External Auditor Coordination: Communicate and liaise with external auditors, including IT auditors, regarding audit requests, supporting documentation, audit findings, and related risk and control discussions, as needed.
• Ad-Hoc Reviews & Projects: Assist with ad-hoc reviews, special projects, process improvement initiatives, system implementations, and other assignments that support the Company’s internal control environment, ICFR readiness, and broader business objectives.
• Culture & Values: Demonstrate behaviors aligned with the Company’s values and desired culture, and perform other related duties as assigned.

QUALIFICATIONS

• Bachelor’s degree in Accounting, Finance, Business Administration, Information Systems, Forensic Accounting, or a related field; equivalent relevant work experience may be considered.
• Minimum of 5 years of experience in internal audit, internal controls, ICFR compliance, public accounting, external audit, accounting, or a related industry role; Big 4 or public accounting experience preferred.
• Working proficiency on Spanish (bilingual).
• Experience with ICFR requirements, risk and control matrices, process narratives, flowcharts, walkthroughs, control testing, and remediation tracking.
• Working knowledge of the COSO Internal Control—Integrated Framework, including risk assessment, control design, control documentation, operating effectiveness testing, remediation, and scoping concepts.
• Demonstrated knowledge of IT General Controls (ITGC) and IT application controls, including access management, change management, and computer/IT operations, and experience performing or supporting IT scoping for SOX/ICFR purposes.
• Experience using or supporting an automated Governance, Risk, and Compliance (GRC) tool preferred.
• CPA, CIA, CISA, CFE, or similar professional certification strongly preferred; CISA or equivalent IT audit certification a plus.

KNOWLEDGE, SKILLS & ABILITIES

• Strong understanding of accounting, auditing, internal control, and ICFR compliance principles.
• Working knowledge of IT General Controls (ITGC) domains—access management, change management, and IT/computer operations—and IT scoping methodology for financial reporting risk.
• Strong analytical skills with the ability to evaluate processes, identify control gaps (including IT-related gaps), assess root causes, and recommend practical improvements.
• Excellent attention to detail, documentation discipline, and ability to produce clear, audit-ready workpapers and reports.
• Strong written and verbal communication skills, with the ability to collaborate effectively with process owners, IT teams, management, and auditors.
• Ability to work independently, manage multiple priorities, meet deadlines, mentor junior staff, and maintain professional judgment in a dynamic environment.
• Proficient in NetSuite and familiar with GRC tools used to support.
• Bilingual Proficiency in English and Spanish preferred to support effective communication with stakeholders and process owners across global operations.