Job description Posted 05 March 2019

QA Consultant: (SOX, Infrastructure, Privilege Access)


This role is an exciting opportunity within GSK Tech Security & Risk organisation who provide services and expertise to enable risk based, compliant, efficient and value driven Tech Delivery.

Key Responsibilities:

• Supporting the set up of a SOX testing and reporting service across Tech

• Leading and managing the planning and execution of Tech SOX testing for applications and infrastructure

• Facilitating and performing SOX testing and reporting in relevant Tech areas to agreed timelines

• Liaising with external auditors during testing phases and ongoing throughout the year

• Communicating issues noted from testing to key stakeholders in a timely manner

• Supporting Tech to develop strong remediation plans and address issues in a timely manner

• Tracking and reporting on outstanding actions relating to SOX findings

• Understanding Tech processes, identify risks & controls and define monitoring tests

Basic qualifications:

• Bachelors or MSc Information Technology/Finance/Business

• Significant experience working in IT audit, e.g. IT SOX tester/ IT auditor

• Significant experience in Sarbanes Oxley audit

• Significant experience of analysing situations to identify issues and produce resolution recommendations

• Proven capability in Risk Management and Internal Controls

• Background in Tech

• Proven experience working and influencing cross functionally

• Experience of working with external auditors on control and SOX testing

• Strong analytical skills, attention to detail

• Prepared to work at a low level of detail where necessary

• Strong and clear communication skills – verbal and written

• Ability to engage with leadership teams

• Sense of urgency

Preferred qualifications:

• Experience at a big 4

• SAP, JDE or other ERP application and/or infrastructure knowledge and experience

• Sailpoint and Cyberark experience

• CRISC, CISA or other relevant qualification

• Working experience in the practical application of Agile/Scrum development/deployment methodologies

• Working experience in process and control design

Additional information about the process

All profiles will be reviewed against the required skills and experience. Due to the high number of applications, we will only be able to respond to successful applicants in the first instance. We thank you for your interest and the time taken to apply.