Senior Internal Controls Analyst

About Texas Children's Hospital

Summary:

We are searching for a Senior Internal Control Analyst-- someone who works well in a fast-paced setting. In this position, you will serve as a key member of the Finance team responsible for the development and maintenance of an ongoing, long-term internal process to measure, monitor, and manage risks in accordance with the Sarbanes-Oxley Act (SOX), Section 40.

Think you’ve got what it takes?

Responsibilities

• Conduct the annual risk assessment and provide direct support to functional team leaders and business process owners and organize reviews of business processes, risks, and mitigating controls documentation by functional owners at an established frequency and maintaining updates in a centralized repository
• Manages security, roles, validation rules, etc. Participates in interval-based activities related to the analysis of the in-scope system's application security. Verifying existing or garnering adoption of risk-mitigating features of in-scope systems to enhance detection and prevention of certain risks
• Support business process owners in assessing and analyzing their internal control environment, identifying internal control gaps and improvement opportunities, making recommendations on corrective action, and providing follow-up to ensure that remediation occurs in a timely manner
• Partner with business process owners to document the significant processes related to their functional area while creating/maintaining the required process narratives, flowcharts, risk and control matrices, segregation of duties matrices, and any other documentation necessary to comply with Sarbanes-Oxley, Section 404.
• Perform quality reviews to ensure that the documentation is accurate, complete, properly supported and that the documented controls address the applicable risks. Evaluation of the appropriateness of primary and secondary control designation
• Manage the Sarbanes-Oxley program in accordance with established deadlines. This includes appropriate planning, communication, follow-up, issue escalation, and quality review
• Responsibilities related to IRM post-Oracle implementation, participate in the execution of recurring User Access Reviews (UAR) to certify the appropriateness of application security assigned to finance department personnel, aid in the identification and formalization of net-new Oracle Cloud Audit Policies to further address risks within financial business processes and in the identification and formalization of net-new Risk Management Cloud (RMC) models, both AAC for segregation of duties purposes and AFC for transactional analysis, to further address risks within financial business processes
• Communicate the adopted “Spirit” of Sarbanes-Oxley Internal Control Program and related requirements, assist in the organization and of training & review sessions, providing education to the local SOX community including process owners, documentation owners, testers, and other employee population as needed
• Participate in the development and facilitation of management educational programs related to risk, control, financial rules, and regulations. Provide guidance and advice on internal control approaches, issue resolution, and best practices
• Performs Project Status/Update Reporting to Senior Management as requested and ensures that written reports and correspondence are organized, accurate, appropriate in content, professional in appearance, and compliant with established standards

Qualifications

• Bachelor's Degree
• 4 years’ experience in a financial reporting and/or healthcare audit/compliance environment payable, financial disbursements, or operational accounting and 1-year experience in SOX and audit
• Oracle Cloud experience preferred
• CPA preferred
• Being fully vaccinated against COVID-19, including any booster dose(s) of the COVID-19 vaccine recommended by the Centers for Disease Control when eligible, is required for all employees at Texas Children’s unless approved for a medical or religious exemption.