Financial Controls Analyst - SOX/ IT Audit - Gen AI

About This Role Wells Fargo is seeking a Finance control analyst.

In This Role, You Will

• Consult with the line of business and enterprise functions on financial reporting or information technology governance, and controls and oversight matters
• Identify compliance and risk management requirements for supported area
• Provide oversight for testing and monitoring involving moderate to complex subject matter or control areas
• Communicate and provide consultation regularly with stakeholders throughout the enterprise
• Implement, operate, and report results of certain elements of the company’s policy, governance and oversight framework
• Support implementation of moderate to complex projects and initiatives
• Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals

Required Qualifications:

• 2+ years of Finance, Accounting, Analytics, Reporting or Business and Technology Audit experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired Qualifications :

• CA/CMA or MBA or any other equivalent qualification
• Working knowledge of latest AI tools /Prompt Engineering, Working knowledge of LLMs’, GenAI systems such as Copilot, Claude etc.
• Knowledge and understanding of regulatory agencies: Federal Reserve, US SEC and OCC.
• Minimum two years at Big Four/super regional public accounting firm with experience in IT audit and/or IT SoX advisory/consulting service.
• Prefer one or more of the following certifications: CISA, CISM, CISSP.
• Practical experience performing IT audit/IT COSO application control testing.
• Strong critical thinking skills with ability to credibly challenge status quo experience with continuous improvement of application control testing processes and results.
• Strong relationship management skills; ability to negotiate difficult positions without harming relationships.
• Intermediate Microsoft Office (Word, Excel, Outlook, and PowerPoint) skills
• Ability to prioritize, meet deadlines, and achieve goals and work under pressure in a dynamic and complex environment
• Excellent verbal, written, and interpersonal communication skills
• Ability to take on a high level of responsibility, initiative, and accountability

Job Responsibilities:

• Providing meaningful assessments of IT control environments impacted by financial, risk, and regulatory reporting;
• Assessing adherence to Well Fargo & Company’s COSO based policies for IT controls impacted by internal controls over financial reporting (SEC and Regulatory Reporting) and strategic planning for ongoing IT control adherence to COSO policies (proactive anticipation of internal control related matters.
• Monitoring new and emerging internal control related guidance and issues and assist with facilitating group-wide training to interested and impacted stakeholders.
• Providing consultation and subject matter expertise for process and IT control related matters including evaluating severity of control deficiencies and related remediation efforts.
• Providing process and control support and thought leadership for projects and interfacing with external auditors, regulators and others on control related matters.
• Acting as a change agent for continual improvement of the control environment.
• Individual will be responsible Leading the IT Application Controls (ITACs) /ITGC (IT General Control) COSO test work.
• Partnering with IT and business Process Owners/Control Owners to document significant in-scope processes according to corporate COSO policy (both process narratives and process flow diagrams). Additionally, assessing the appropriateness and completeness of key risk and key application controls identified;
• Performing walkthroughs of significant processes and ensure required COSO documentation is accurate and reflects relevant business risk and key application controls;
• Partnering with IT and business Process Owners/Control Owners in the creation of process risk assessments (RAM) as well as validating and challenging risk assessment conclusions;
• Validating and providing credible challenge to identified shared services, third party service providers, and significant applications;
• Performing COSO testing of key application controls, including design effectiveness assessments and operating effectiveness testing.
• Validating and challenging documentation of application control deficien…