Information Security Engineer

Role Description Key Responsibilities Audit Planning & Coordination - Provide end-to-end support for audit and compliance activities across all in-scope applications. - Plan, coordinate, track, and manage audit-related deliverables in partnership with business users, vendors, internal control teams, and KC delivery leads. - Ensure all audit activities are completed within agreed timelines and comply with internal control requirements. - Maintain audit calendars, trackers, status reports, and action logs. - Initiate and manage quarterly privileged user reviews for all applicable applications. - Identify privileged users, prepare review documentation, establish timelines, and communicate review requirements to stakeholders. - Track review progress and ensure timely completion across all applications. - Escalate delays, risks, or non-compliance issues where required. - Drive regular follow-ups with business teams, application support teams, and external vendors to ensure completion of review activities. - Monitor pending actions and ensure no applications are missed during review cycles. - Provide periodic status updates and highlight risks to management. Audit Evidence Management - Collect, validate, organize, and maintain audit evidence in designated repositories and audit tools. - Ensure all supporting documentation is complete, accurate, and audit-ready prior to submission. - Maintain documentation standards to support future audits and provide full traceability. Required Qualifications - Bachelor's degree in Information Technology, Computer Science, Information Systems, Business Administration, or a related field. - 3+ years of experience in IT controls, audit coordination, compliance, user access management, or IT governance. - Experience supporting SOX, ITGC, access management, or compliance-related activities. - Strong understanding of user access reviews, privileged access management, and access governance controls. - Experience working with cross-functional teams, business stakeholders, and external vendors. - Strong documentation, analytical, and organizational skills. - Excellent verbal and written communication skills. Preferred Skills - Experience supporting SOX, ITGC, SOC, or internal audit programs. - Familiarity with identity and access management processes. - Experience with ServiceNow, SharePoint, Excel, AuditBoard, BeyondTrust, or similar governance tools. - Knowledge of privileged access management and access certification processes. - Ability to manage multiple applications and competing priorities in a compliance-driven environment.