Summary
Nutex Health is seeking an IT SOX Analyst to support its SOX compliance program. The role executes and monitors IT General Controls, maintains control documentation, supports audit testing and remediation, and collaborates with IT, Information Security, Internal Audit, External Audit, and business stakeholders.
Responsibilities
- Support the execution and monitoring of the Company's IT SOX compliance program and related controls
- Perform control activities, maintain supporting documentation, and assist with remediation efforts
- Support periodic reviews of system access, change management, and other IT compliance processes
- Maintain SOX documentation, including narratives, process flows, and control matrices
- Coordinate and provide documentation and evidence for Internal Audit and External Audit requests
- Assist with walkthroughs, testing, and issue-tracking activities
- Partner with IT and business stakeholders to strengthen and improve control processes
- Assist in evaluating control gaps, remediation activities, and compliance requirements
- Serve as a backup resource for the IT SOX Manager and support broader IT compliance initiatives as needed
- Track SOX-related activities, findings, and remediation efforts
- Prepare status reports and other compliance-related metrics for management review
Skills
- 3-5 years of experience in public accounting (Big 4 preferred), application security, access management, and industry IT experience in a regulated environment
- Experience supporting SOX compliance programs, IT controls, or other regulatory and compliance initiatives
- Working knowledge of SOX compliance requirements, IT controls, and risk management principles
- Familiarity with industry frameworks such as COSO, COBIT, NIST, HITRUST, or similar standards
- Experience working with enterprise applications, user access management, and control documentation
- Strong analytical, documentation, and organizational skills
- Effective written and verbal communication skills with the ability to interact across technical and non-technical teams
- Experience working in a publicly traded company, healthcare environment, or other regulated industry preferred
- CISA, CRISC, CISM, CPA, or other relevant certifications
- Progress toward professional certifications will be considered
Qualifications
Must Haves
- 3-5 years of experience in public accounting (Big 4 preferred), application security, access management, and industry IT experience in a regulated environment
- Experience supporting SOX compliance programs, IT controls, or other regulatory and compliance initiatives
- Working knowledge of SOX compliance requirements, IT controls, and risk management principles
- Familiarity with industry frameworks such as COSO, COBIT, NIST, HITRUST, or similar standards
- Experience working with enterprise applications, user access management, and control documentation
- Strong analytical, documentation, and organizational skills
- Effective written and verbal communication skills with the ability to interact across technical and non-technical teams
Nice to Haves
- Experience working in a publicly traded company, healthcare environment, or other regulated industry preferred
- CISA, CRISC, CISM, CPA, or other relevant certifications
- Progress toward professional certifications will be considered
Benefits
- Opportunities for career growth and professional development.
- Collaborative and innovative work environment.