Security Compliance Specialist (Buda)

Position Summary

We are seeking a detail-oriented and analytical IT / Security Compliance Specialist to support and strengthen our SOX IT control environment. This role will be on-site in Buda, TX, and will be primarily responsible for the design, execution, documentation, and continuous improvement of IT General Controls (ITGCs), with a strong focus on SOX compliance.

In addition, this individual will play a key role in evaluating Segregation of Duties (SoD) risks within business systems as part of the user access provisioning and change management processes. The ideal candidate combines technical understanding of IT systems with strong knowledge of internal controls and audit requirements.

This role partners closely with IT, Accounting, Operations, and business stakeholders to ensure a strong and sustainable control environment.

Key Responsibilities

SOX IT Controls (Primary Focus)

· Support the execution and maintenance of SOX IT General Controls (ITGCs), including:

o User access management (provisioning, modifications, terminations, periodic access reviews)

o Privileged access controls

o Change management controls

o IT operations controls (backups, job monitoring, incident management)

· Perform control testing, evidence collection, and documentation in support of internal and external audits.

· Identify control gaps and work with control owners to design and implement remediation plans.

· Assist in annual SOX scoping and risk assessment activities.

· Maintain clear and audit-ready documentation of control procedures, narratives, and risk/control matrices.

· Partner with external auditors to facilitate walkthroughs and testing requests.

Segregation of Duties (SoD) & Access Governance

· Evaluate Segregation of Duties risks as part of user access requests and role design.

· Review and assess access requests for conflicts within ERP and other key financial/business systems.

· Recommend mitigating controls where SoD conflicts cannot be avoided.

· Assist in maintaining and refining SoD matrices and access governance frameworks.

· Support periodic user access reviews and certification processes.

Process Improvement & Governance

· Drive continuous improvement of control processes to increase efficiency and automation.

· Assist in the implementation or optimization of GRC tools and access governance platforms.

· Provide training and guidance to control owners and system administrators.

PI479c0feb7990-38003-39837798