{"id":1812198,"url":"https://alion.io/job/datavant-sr-itgc-it-sox-analyst","title":"Sr. ITGC / IT SOX Analyst","company":{"id":2448,"name":"Datavant","domain":"datavant.com","url":"https://alion.io/company/datavant","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":75,"open_postings":8,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-13T05:45:00Z"}},"role":"Analytics","role_family":"Analytics","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"inferred_payroll_markers","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":136000,"max":170000,"currency":"USD","period":"year","gross":null,"usd_annual":170000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"ISO 27001","optional":false},{"name":"ITIL","optional":false},{"name":"Okta","optional":false},{"name":"Python","optional":false},{"name":"Confluence","optional":true},{"name":"Jira","optional":true},{"name":"Slack","optional":true}],"status":"live","first_seen_at":"2026-10-03T17:25:35Z","employer_posted_date":null,"last_verified_at":"2026-10-03T17:25:35Z","board_verified":false,"closed_at":null,"days_open":10,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":10},"description":"Datavant is a data platform company and the world’s leader in health data exchange. Our vision is that every healthcare decision is powered by the right data, at the right time, in the right format.\n\nOur platform is powered by the largest, most diverse health data network in the U.S., enabling data to be secure, accessible and usable to inform better health decisions. Datavant is trusted by the world’s leading life sciences companies, government agencies, and those who deliver and pay for care. \n\nBy joining Datavant today, you’re stepping onto a high-performing, values-driven team. Together, we’re rising to the challenge of tackling some of healthcare’s most complex problems with technology-forward solutions. Datavanters bring a diversity of professional, educational and life experiences to realize our bold vision for healthcare.\n\nWhat We’re Looking ForAs a Sr ITGC / IT SOX Analyst (GRC) within the Security Governance, Risk, and Compliance (GRC) organization, you will lead implementation, remediation, and ongoing management of Information Technology General Controls (ITGCs) within our organization. This is a hands-on role suited for a self-starter who enjoys solving problems, collaborating cross-functionally, and ensuring compliance excellence in a fast-paced environment.This role will be responsible for ensuring that our IT processes and controls are maintained, compliant with regulatory standards, and aligned with best practices. This role reports to the Sr Manager of IT Assurance (Security GRC) and will work cross-functionally with IT, GRC, Information Security, Finance, and Compliance teams to address any ITGC deficiencies and assessments to drive continuous improvement in compliance programs.\nWhat You Will Do\n ITGC Program Execution\n\nLead and monitor ITGC testing (access, change management, computer operations, backup/recovery, interfaces).\n\nExecute walkthroughs, control design assessments, and test-of-one/ongoing effectiveness procedures.\n\nValidate completeness and accuracy (C&A) for key reports and data flows; assess IPE.\n\nControls Design & Remediation\n\nAdvise on control design and documentation (risk/control matrices, narratives, process maps).\n\nTrack deficiencies; partner on root cause analysis and target-state remediation plans.\n\nIndependently verify remediation effectiveness and maintain evidence quality.\n\nStakeholder Management\n\nCoordinate with external auditors and co-sourced providers; align on scope, reliance, and timelines.\n\nCommunicate findings and status to management; escalate risks proactively.\n\nGovernance & Continuous Improvement\n\nMaintain ITGC program artifacts (RACM, population and sample evidence, issue logs).\n\nContribute to controls automation, segregation of duties (SoD) governance, and periodic access recertifications.\n\nSupport IT policy/standard refreshes and control rationalization.\n\nAssessment Execution\n\nPerform end-to-end assessment: scoping, risk & control assessments, test plans, fieldwork, and reporting.\n\nAssess IT processes including identity & access management, change/release management, backup/recovery, incident/problem management, vulnerability management, patching, disaster recovery/business continuity, interfaces/integrations, and data quality.\n\nPerform cybersecurity-themed reviews (e.g., endpoint security, logging/monitoring, vulnerability & patch management, configuration baselines).\n\nAdvisory & Continuous Improvement\n\nProvide practical recommendations that balance risk with operational realities.\n\nMonitor remediation progress; validate closure and sustainment of fixes.\n\nSupport integrated audits with operational/financial teams; contribute to annual risk assessment and audit plan.\n\nReporting & Governance\n\nDraft clear reports with prioritized findings, risk ratings, and management action plans.\n\nPresent results to stakeholders; communicate clearly to technical and non-technical audiences.\n\nMaintain audit methodology and working papers to internal standards; support QA reviews.\n\nWhat You Need to Succeed\n4+ years of progressively responsible IT General Controls experience via IT audit/assurance, SOX 404 testing, or IT risk & controls (Big 4 or industry).\n\nHands-on experience testing ITGCs and automated application controls; working with internal and external auditors.\n\nStrong understanding of access management, change management, computer operations, IPE/C&A, and segregation of duties.\n\nExcellent communication skills—you can explain control requirements to engineers and translate technical speak for auditors.\n\nDemonstrated ability to juggle competing priorities in a fast-moving environment.\n\nStrong analytical, organizational, and project management capabilities.\n\nSelf-starter who is driven to build structure where needed.\n\nTool & Technology Stack:\nWe value familiarity with the following tools and platforms. While not all are required, exposure to these (or similar) technologies will help you succeed:\n\nGRC/Audit Platforms: TrustCloud, AuditBoard/SoxHub\n\nTicketing Systems: Jira\n\nCollaboration Tools: Slack, Confluence\n\nCloud Platforms: AWS, Azure, GCP\n\nProficiency with common ERP systems (e.g., Oracle, NetSuite)\n\nIdentity/Access Governance platforms: (e.g Okta , SailPoint)\n\nWhat We Offer\nCertifications: CISA, CISSP, CIA, CPA, CRISC (one or more strongly preferred).\n\nFamiliarity with NIST, AICPA / SOC 1 & 2, COBIT, COSO, ITIL, PCI, or ISO 27001.\n\nTechnical Exposure to cloud controls (Azure/AWS/GCP), DevOps (CI/CD) controls, and data governance.\n\nAutomation/Scripting/Policy-as-code: Familiarity with automation tools or scripting languages (e.g., Python, Bash) for control testing and workflow optimization is a plus\n\nWe are committed to building a diverse team of Datavanters who are all responsible for stewarding a high-performance culture in which all Datavanters belong and thrive. We are proud to be an Equal Employment Opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status.\n\nAt Datavant our total rewards strategy powers a high-growth, high-performance, health technology company that rewards our employees for transforming health care through creating industry-defining data logistics products and services.\n\nThe range posted is for a given job title, which can include multiple levels. Individual rates for the same job title may differ based on their level, responsibilities, skills, and experience for a specific job.\n\nThe estimated total cash compensation range for this role is:\n$136,000—$170,000 USD\n\nTo ensure the safety of patients and staff, many of our clients require post-offer health screenings and proof and/or completion of various vaccinations such as the flu shot, Tdap, COVID-19, etc. Any requests to be exempted from these requirements will be reviewed by Datavant Human Resources and determined on a case-by-case basis. Depending on the state in which you will be working, exemptions may be available on the basis of disability, medical contraindications to the vaccine or any of its components, pregnancy or pregnancy-related medical conditions, and/or religion. \n\nThis job is not eligible for employment sponsorship.\n\nDatavant is committed to a work environment free from job discrimination. We are proud to be an Equal Employment Opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status. To learn more about our commitment, please review our EEO Commitment Statement here. Know Your Rights, explore the resources available through the EEOC for more information regarding your legal rights and protections. In addition, Datavant does not and will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay. \n\nAt the end of this application, you will find a set of voluntary demographic questions. If you choose to respond, your answers will be anonymous and will help us identify areas for improvement in our recruitment process. (We can only see aggregate responses, not individual ones. In fact, we aren’t even able to see whether you’ve responded.) Responding is entirely optional and will not affect your application or hiring process in any way.\n\nDatavant is committed to working with and providing reasonable accommodations to individuals with physical and mental disabilities. If you need an accommodation while seeking employment, please request it here, by selecting the ‘Interview Accommodation Request’ category. You will need your requisition ID when submitting your request, you can find instructions for locating it here. Requests for reasonable accommodations will be reviewed on a case-by-case basis.\n\nFor more information about how we collect and use your data, please review our Privacy Policy.\n\nOriginally posted on Himalayas","description_format":"text","description_chars":9105,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Health Care","Team Communication & Collaboration","Health Data & Interoperability"],"lifecycle":[{"event":"open","at":"2026-10-03T21:04:09Z"}],"visa":[],"liveness":{"score":79,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.792,"p_room":1,"age_days":9,"expected_fill_days":29,"reasons":["seen:9","velocity","win:early"],"computed_at":"2026-10-13T05:45:00Z"},"pay":{"stated_usd_annual":170000,"is_top_pay":true},"html_url":"https://alion.io/job/datavant-sr-itgc-it-sox-analyst","json_url":"https://alion.io/job/datavant-sr-itgc-it-sox-analyst.json","meta":{"generated_at":"2026-10-14T03:57:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6065,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2448},"rest":"https://alion.io/mcp/rest/get_company?id=2448"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdatavant-sr-itgc-it-sox-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdatavant-sr-itgc-it-sox-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdatavant-sr-itgc-it-sox-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/datavant-sr-itgc-it-sox-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdatavant-sr-itgc-it-sox-analyst"}]}