{"id":3470643,"url":"https://alion.io/job/chevron-platform-sox-risk-analyst","title":"Platform SOX Risk Analyst","company":{"id":5944,"name":"Chevron","domain":"chevron.com","url":"https://alion.io/company/chevron","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":96,"open_postings":6,"ghost_share":0,"stale_share":0.167,"repost_share":0,"time_to_fill_p50_days":22,"computed_at":"2026-11-03T05:54:40Z"}},"role":"Finance","role_family":"Finance","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":12000,"max_usd":28000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":13},"experience_years_min":3,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[],"status":"live","first_seen_at":"2026-10-29T17:00:04Z","employer_posted_date":"2026-10-29","last_verified_at":"2026-11-03T03:07:43Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"Total Number of Openings\n1The Platform SOX Risk Analyst provides analysis, oversight, constructive challenge, and compliance support for information technology controls that support internal control over financial reporting. The role partners with platform leaders, control owners, control performers, Internal Controls, Finance, audit teams, and cybersecurity stakeholders to evaluate control design and operating effectiveness, enforce evidence and execution requirements, identify and communicate deficiencies, and drive timely, sustainable remediation. The position also supports broader platform cybersecurity risk-management activities while maintaining primary accountability for SOX-IT compliance analysis and control enforcement.About the Company\nThe Chevron Engineering and Innovation Excellence Center (ENGINE) in Bengaluru India brings together the resources and expertise of the Chevron global network with talent in India to enhance agility and technological innovation to optimize solutions for the world’s current and future energy challenges. As one of the leading energy providers worldwide, Chevron is involved in the production of crude oil and natural gas, manufacturing of transportation fuels, lubricants, petrochemicals, and additives, and the development of enabling technologies.\nChevron's vision is to be the global energy company most admired for its people, partnerships, and performance. With a clear purpose to develop affordable, reliable, ever-cleaner energy that enables human progress, we believe human ingenuity has the power to solve any challenge and overcome any obstacle. Meeting the world’s growing energy needs requires the pursuit of innovations and advancements that deliver a better future for all.\nAbout the Position\nThis role will report into the IT Risk Manager at Chevron Engine, India.\nKey Responsibilities\nSOX Compliance Analysis and Enforcement of IT Controls\nAnalyze and monitor compliance with SOX 404 requirements for assigned IT processes, applications, platforms, and Process 20 General IT Controls. \nEvaluate whether assigned controls are appropriately designed to mitigate identified financial-reporting risk and whether controls operate as designed. \nAssess local application of global control designs; review control performance, evidence, test results, and documentation for completeness, accuracy, and supportability to third parties. \nApply appropriate testing methods and population and sampling concepts; analyze results and identify design or operating deficiencies. \nEnforce control requirements by challenging incomplete, insufficient, late, or noncompliant execution and escalating unresolved compliance gaps through established governance channels. \nAnalyze and validate the impact of ineffective controls; support root-cause analysis, quantification, remediation planning, retesting, and closure of deficiencies. \nMonitor remediation plans and retesting efforts for ineffective controls and verify that corrective actions are sustainable and completed within required timeframes. \nCoordinate and complete SOX reporting requirements; monitor testing activities and communicate progress, exceptions, and emerging concerns to relevant stakeholders. \nMaintain accurate SOX documentation, including control narratives, risk/control matrices, flowcharts, testing support, evidence, and remediation records, in accordance with applicable retention requirements. \nUse SOX reporting and analytics capabilities to evaluate assessment accuracy and completeness, detect trends, and support management reporting. \nParticipate in annual scoping and risk reviews, including consideration of changes to business processes, applications, systems, organizations, and major projects. \nAdvise control owners and performers on evidence requirements, control execution expectations, and remediation of ineffective controls; identify training needs and reinforce consistent SOX testing practices. \nIT Cybersecurity Risk Management Service Execution\nExecute risk management services for assigned digital platforms or business areas, including risk assessments, IRM planning, risk-register maintenance, policy exception support, vulnerability and assessment remediation coordination, and risk tracking and reporting. \nAnalyze business and technical risks and translate them into clear business language, actionable mitigation plans, and decision-quality information for stakeholders. \nMonitor execution of risk and remediation plans, challenge overdue or ineffective actions, and escalate priority conflicts or material concerns to the Risk Manager. \nEngage architecture, cybersecurity, and platform teams to encourage secure-by-design solutions and alignment of security requirements with enterprise and solution architectures. \nPromote consistent use of risk management processes, systems of record, metrics, and reporting. \nStakeholder Engagement, Reporting, and Continuous Improvement\nEngage Platform Technical Managers, Product Line Managers, Finance, Internal Controls, Corporate Audit, external audit support teams, Compliance, and other stakeholders to align on SOX and risk priorities. \nProvide regular, fact-based reporting on control status, testing progress, deficiencies, remediation, compliance performance, and representation-letter matters. \nEstablish and document SOX compliance procedures with relevant stakeholders; periodically review processes and recommend practical improvements that increase quality, consistency, efficiency, and sustainability. \nSupport awareness and training for control owners, control performers, assessors, and other stakeholders on SOX-IT responsibilities and documentation expectations. \nMaintain current knowledge of SOX, internal controls, cybersecurity risk, technology controls, and relevant company requirements. \nRequired Qualifications\nDemonstrated experience of 3 to 5 years in applying Sarbanes-Oxley Section 404 requirements to information technology processes, systems, applications, or technology-dependent financial controls. \nDemonstrated experience evaluating the design and operating effectiveness of General IT Controls, including controls relevant to access, change management, technology operations, interfaces, automated processing, or other assigned SOX-IT control areas.\nPractical experience performing or reviewing SOX control assessments using inquiry, observation, inspection, and limited re-performance, with inquiry supplemented by corroborating evidence. \nDemonstrated ability to evaluate control populations, sampling approaches, test procedures, evidence, exceptions, and conclusions for completeness, accuracy, consistency, and audit supportability.\nPreferred Qualifications\nExperience distinguishing design deficiencies from operating deficiencies and supporting deficiency evaluation, root-cause analysis, impact assessment, remediation planning, retesting, and closure. \nExperience preparing and maintaining control narratives, process flowcharts, risk and control matrices, assessment workpapers, evidence, deficiency records, and remediation documentation. \nExperience using governance, risk, compliance, or SOX management platform to maintain control information, document testing, monitor completion, and produce compliance reporting. \nExperience working directly with control owners, control performers, technology teams, Internal Controls, Finance, internal audit, or external audit stakeholders to resolve SOX-IT issues and meet reporting deadlines. \nChevron ENGINE supports global operations, supporting business requirements across the world. Accordingly, the work hours for employees will be aligned to support business requirements. The standard work week will be Monday to Friday. Working hours are 8:00am to 5:00pm or 1.30pm to 10.30pm\nWhat we can offer you\nEverything we do at Chevron is guided by our values and our commitment to The Chevron Way.\nHave the opportunity to take part in world-leading energy projects, advance your professional development and expand your career within an inclusive and collaborative workplace.\nJoin a workplace where innovation, collaboration and safety are at the core of how we work.\nWork in thoughtfully designed environments that support focus, well-being, and innovation enhanced by digital tools that enable seamless collaboration.\nGrow through structured learning, mentorship, and opportunities to contribute to impactful projects that align with Chevron’s values and business priorities.\nAccess comprehensive benefits that support your health, well-being, and work-life balance.\nEngage with emerging technologies and digital solutions that are shaping the future of energy and enterprise.\nHow to apply\nTo be a part of our success, click APPLY to submit your application.\nChevron regrets that it is unable to sponsor employment Visas or consider individuals on time-limited Visa status for this position.\nPrivacy and Terms and Conditions\nWe respect the privacy of candidates for employment. This Privacy Notice sets forth how we will use the information we obtain when you apply for a position through this career site. If you do not consent to the terms of this Privacy Notice, please do not submit information to us.\nPlease access the Global Application Statements, select the country where you are applying for employment. By applying, you acknowledge that you have read and agree to the country specific statement.\nTerms of Use\n“ENGINE” refers to the Chevron Engineering and Innovation Excellence Center, which operates under Chevron Global Technology and Services Private Limited, an affiliate of Chevron Corporation. References to ENGINE in this document are for convenience only and do not denote a separate legal entity.\nThis job advertisement is intended to provide a general overview of the role and workplace environment. Role details and outcomes may vary based on business needs and individual performance.\nChevron participates in E-Verify in certain locations as required by law.","description_format":"text","description_chars":9975,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Energy & Utilities","Natural Resources","Fossil Fuels","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-29T17:00:04Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":4,"expected_fill_days":22,"reasons":["conf:2","velocity","win:early","comp:brand"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/chevron-platform-sox-risk-analyst","json_url":"https://alion.io/job/chevron-platform-sox-risk-analyst.json","meta":{"generated_at":"2026-11-03T08:34:51Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12077,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5944},"rest":"https://alion.io/mcp/rest/get_company?id=5944"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fchevron-platform-sox-risk-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fchevron-platform-sox-risk-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fchevron-platform-sox-risk-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/chevron-platform-sox-risk-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fchevron-platform-sox-risk-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3470643}},{"tool":"search_jobs","arguments":{"company":"chevron.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3470643},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}