Group SOX Control Analyst

As our Group SOX Control Analyst, you’ll play a key role in supporting the execution of the Group's Sarbanes-Oxley (SOX) compliance programme by assisting in the design, documentation, testing and monitoring of Internal Controls over Financial Reporting (ICFR). Working closely with the Group SOX Controller and business stakeholders, you will help identify and assess financial reporting risks, evaluate controls, support audit activities, and contribute to the continuous improvement of the control environment.

This role provides operational and analytical support across all financial SOX controls including but not limited to, Information Produced by the Entity (IPE), and SOX-related project activities.

Risk Assessment & Scoping

• Identify and assess key financial reporting risks.
• Assist with the annual SOX scoping and risk assessment exercises
• Control Design & Framework Enhancement
• Support the design and implementation of controls aligned to COSO and PCAOB principles
• Review control design to ensure sufficient precision to mitigate financial reporting risks
• Assess the adequacy of existing control structures and recommend improvements
• Drive continuous improvement of the SOX control framework
• Support the integration of controls into new systems, processes, or business initiatives

SOX Assessments and Testing

• Perform Design Effectiveness (DE) and Operating Effectiveness (OE) testing of SOX controls to assess whether controls are implemented as designed and operating effectively across the Group
• Assess the SOX implications of changes due to Accounting or regulatory updates, Process or policy changes, System implementations or enhancements or Organisational restructuring.
• Prepare high-quality audit working papers and maintain complete supporting documentation.
• Partner with stakeholders to ensure controls evolve alongside business changes
• Track testing progress and follow up on outstanding evidence with control owners.
• Documenting testing exceptions, assess control deficiencies/observations, including root cause analysis and support practical and sustainable remediation actions that mitigate financial reporting risks.
• Monitor remediation activities and validate corrective actions where required, including remediation testing.
• Collaborate with control owners to reinforce expectations around control execution and documentation quality.

Governance & Audit Support

• Prepare documentation for walkthroughs and control discussions.
• Updating and maintaining Process Narratives/Process Flow Charts and Risk and Control Matrices (RACMs).
• Liaise with IT Control teams regarding dependencies between IT General Controls, IT Automated Controls and Business Process Controls.
• Maintain documentation standards and version control.
• Assist with periodic SOX reporting and dashboard preparation.
• Support external and internal audit requests
• Coordinate evidence requests

Continuous Improvement

• Review and enhance documentation to ensure consistency and clarity across the Group
• Identify opportunities to improve and standardise SOX processes and documentation across business units/entities.
• Support the development of templates, checklists, and standard operating procedures.
• Assist with maintaining process documentation and knowledge repositories.
• Contribute to automation and data analytics initiatives that improve SOX testing and reporting efficiency.
• Keep up to date with changes in SOX, COSO, PCAOB, and emerging financial reporting risks.
• Provide insights into control effectiveness and programme maturity
• Promote awareness of controls best practices across the organisation

Qualifications

• Bachelor’s degree in Accounting/ Finance/ Internal Auditor a related field.
• CIA/CA (SA) certification will be advantageous.

Experience

• 2–4 years' proven experience in SOX compliance, External Audit, Internal Audit or Financial Controls.
• Experience performing SOX Controls testing.
• Exposure to financial reporting processes, Information Produced by the Entity (IPE), SOX documentation and control deficiency evaluation.
• Experience working with audit documentation or GRC tools (e.g Optro/Workivia/SAP).
• Exposure to ERP systems such as Microsoft Dynamics, Sage, or similar platforms would be advantageous.

Technical Skills

Knowledge of:

• PCAOB Auditing Standards.
• Internal Control Over Financial Controls (ICFR)
• SOX Section 404 requirements.
• COSO Internal Control Framework.
• Risk assessment methodologies
• Financial statement assertions
• Control deficiency evaluation
• Information Produced by the Entity (IPE).
• Microsoft Office Suite (Excel, Word, PowerPoint).
• Audit management platforms.
• Experience with ERP systems and SOX tools (e.g., Workiva, Optro, PowerBI, etc.)

Behavioural Competencies

• Strong analytical and problem-solving skills.
• Excellent attention to detail.
• Strong organisational and planning abilities.
• Good written and verbal communication skills.
• Ability to build positive working relationships with stakeholders.
• Ability to work independently while knowing when to escalate matters.
• Willingness to learn and continuously improve.
• Adaptable and able to work effectively in a fast-paced environment.
• High level of integrity, professionalism, and accountability.