Platform SOX Risk Analyst
Chevron Corporation (company site, opens in a new tab)3–5 yrsBengaluruOn-siteDirect career pageEst. 12–18 LPA
Posted 11h ago
Reach people at Chevron Corporation
People at this company you can reach
Log in to see who works here
Create a free account or log in to see the people at Chevron Corporation you could write to:
- Recruiters & HR
- People in this function
- Work addresses
Your match
Against your primary resume
Log in to see your match score
Create a free account or log in to unlock your CV match score across:
- Role fit
- Experience
- Industry relevance
Protocol Intelligence
How competitive this role is
Competition
Background fit
Strictness
Log in to see why each signal reads the way it does.
Job description
Structured overview of role & requirements
About This Role
- Own SOX-IT compliance analysis and enforcement for platform IT controls, including evaluating control design and operating effectiveness, evidence review, and remediation oversight.
- Lead risk management services for assigned digital platforms, executing risk assessments, monitoring remediation, and coordinating with cybersecurity and architecture teams for secure design.
- Engage stakeholders across IT, finance, audit, and cybersecurity to report on control status, enforce compliance, and drive continuous improvement of SOX-IT procedures and training.
Minimum Requirements
- 3 to 5 years experience applying Sarbanes-Oxley Section 404 requirements to IT processes, systems, or technology-dependent financial controls.
- Demonstrated experience assessing General IT Controls including access, change management, operations, interfaces, and automated processing.
- Experience performing or reviewing SOX control assessments with inquiry, observation, inspection, and limited re-performance techniques.
- Work Experience Required: 3 to 5 years explicitly mentioned. Notice period: Not explicitly mentioned in the JD.
Ideal Candidate Profile
- Experienced in evaluating control populations, sampling approaches, test procedures, and evidence to ensure audit completeness and accuracy.
- Capable of distinguishing design versus operating deficiencies and supporting full deficiency lifecycle including root-cause analysis and remediation.
- Comfortable coordinating with multiple stakeholders including control owners, internal and external audit, finance, and cybersecurity teams in a complex global environment.