IT SOX Analyst

Circle K Business Center Poland is looking for a new team player to join as an IT SOX Analyst. The role ensures the effective execution and governance of IT General Controls, focusing on SOX compliance and audit coordination. It serves as the key point of contact in Europe for IT General Control matters, working closely with external auditors and internal control owners. The analyst coordinates control execution, tracks remediation of deficiencies, and supports consistent application of global IT control standards. The position reports directly to the Global SOX IT Controls Manager and supports Circle K’s compliance and risk objectives across the region.

Key Responsibilities

• Coordinate the performance of key IT General Controls with internal control owners.
• Ensure timely completion, proper documentation, and evidence retention for all control activities.
• Act as the primary liaison between external auditors and internal stakeholders during SOX and ITGC audits.
• Facilitate walkthroughs, testing support, evidence collection, and clarification of control operations.
• Follow up on management action plans (MAPs), working with control owners to ensure timely and effective remediation of deficiencies.
• Monitor control gaps and escalate issues where risk remains unaddressed.
• Support evaluations of control design adequacy across existing and new in-scope applications.
• Provide guidance and documentation support to control owners and application teams.
• Support IT compliance efforts for policies, standards, and other regulatory requirements outside of SOX (e.g., GDPR, NIS2).
• Assist with IT risk assessments and interface with regional compliance functions as needed.
• Maintain up-to-date process narratives, control matrices, and testing documentation for European systems and controls.

Education and Certification

• Bachelor’s degree in information technology, Computer Science, Business Administration, or a related field.
• Professional certifications such as CISA, CRISC, or CISSP are preferred.

Experience

• 5+ years of experience in IT SOX compliance, IT audit, or IT risk management in a global organization.
• Proven experience with IT general controls (ITGCs), SOX 404, and related frameworks (e.g., COBIT, COSO).
• Familiarity with ERP systems, cloud platforms, and GRC tools is highly desirable.

Skills and Competencies

• Strong analytical and problem‑solving skills with the ability to identify risks and recommend solutions.
• Excellent communication and interpersonal skills to collaborate with diverse teams and stakeholders globally.
• Strong knowledge of IT control design, operation, and testing methodologies.
• Detail‑oriented with strong organizational skills to manage multiple priorities effectively.
• Ability to work both independently and collaboratively as part of a global team.

Additional Information

• Limited travel required (less than 10%).
• This position will have direct reports but is also expected to work as an individual contributor as needed.
• This position requires a proactive approach to driving global IT compliance and control improvements.

What do we offer?

• Contract of employment
• Annual bonus
• Private medical care
• Cafeteria Platform/Multisport
• English lessons subsidized by the company
• Group insurance
• Attractive discounts for products and services at our stations
• Employee stock purchase plan
• Employee Assistance Program (Lyra)
• Modern and convenient office; virtual visit link: https://goo.gl/maps/CLteHfYcdYMbdESq6
• Trainings & possibility to develop skills in a wide international environment

When working with us you can depend upon it that you will not be judged on the grounds of race, national origin, gender, sexual orientation, disability, age, or other legally protected status. Our diverse and inclusive culture helps us create an amazing atmosphere where everybody feels welcome.

We encourage you to apply.

We know great companies are built from within, by great people like you. Come grow with us!

We’re looking forward to your application.

We hereby inform that in the company Circle K Business Centre Poland sp. z o.o. with registered office in Warsaw an Internal Notification and Follow-up Actions Procedures applies. The document describes rules for reporting violations of law by whistleblowers. Full content of the above-mentioned Procedure is available here: https://www.circlek.pl/o-nas/procedury-zgloszen