Aramco energizes the world economy.
Aramco occupies a unique position in the global energy industry. We are the world's largest producer of hydrocarbons (oil and gas), with the lowest upstream carbon intensity of any major producer.
With our significant investment in technology and infrastructure, we strive to maximize the value of the energy we produce for the world along with a commitment to enhance Aramco’s value to society.
Headquartered in the Kingdom of Saudi Arabia, and with offices around the world, we combine market discipline with a generations’ spanning view of the future, born of our nine decades experience as responsible stewards of the Kingdom’s vast hydrocarbon resources. This responsibility has driven us to deliver significant societal and economic benefits to not just the Kingdom, but also to a vast number of communities, economies, and countries that rely on the vital and reliable energy that we supply.
We are one of the most profitable companies in the world, as well as amongst the top five global companies by market capitalization.
A Finance IT-Controls Assurance Analyst Candidate with an Internal Controls & Sarbanes-Oxley Compliance (SOX) knowledge and IT auditing experience is to join the Controller’s Organization within the Finance, Strategy & Development service line in Saudi Aramco.
The Controller’s Organization acts as Saudi Aramco’s primary representative for financial and income tax reporting to management by producing the Company’s consolidated financial statements, subsidiaries’ financial statements, and other management reports. The Controller Organization actively seeks compliance of all organizations regarding controls over financial reporting and generally achieving good corporate governance throughout the Company.
Candidate will be required to perform the following:
Implement internal controls over financial reporting (ICFR) standards, including, but not limited to, COSO internal control framework and Sarbanes-Oxley regulations to achieve compliance. Plan, develop, and coordinate execution of all phases of SOX compliance. Perform walkthroughs to identify/validate key controls including entity-level, IT general and automated process level controls.
Develop test procedures, coordinate execution of testing, and reporting of results to Management. Develop and update key controls documentation, including process flowcharts, process narratives, risk and controls matrices as well as evaluating and assessing the impact of new systems or major process changes on the internal control system.
Provide advice in respect of handling control deficiencies and related remediation plans. Evaluate and analyze data pertaining to information systems functions for SOX compliance. Able to understand, document, and test complex business and IT processes. Understanding of risk management standards and approaches to conduct annual risk assessment and scoping activity for SOX program.
Introduce appropriate automation to streamline management and reporting related to SOX program. Contribute towards training and development of content and resources for knowledge sharing related to SOX program.
Involve in and contribute to other ad-hoc projects as they may arise. Assist in responding to internal and external audit recommendations and implementing corrective action, prepare monthly and quarterly reports for management reporting. Keep abreast with latest SEC regulations, PCAOB pronouncements, and other SOX related updates.
A bachelor’s degree in Computer Science or its equivalent and professional competencies evidenced by professional certifications such as CISA, CRISC, CISSP, CIA, and or accounting related qualification is highly desirable. Continuing professional education such as membership in a professional association is required.
The experience in relevant industries, which may include practice in public accounting, recent SOX compliance experience in a publicly listed company and /or SOX (Sarbanes-Oxley) consulting experience in a Big 4 advisory firm. It may also include knowledge of auditing principles and standards, audit follow ups, PCAOB’s standards such as AS5 (ICFR), Internal Controls frameworks (e.g. COSO). Intimate knowledge of SAP systems, controls and related cybersecurity processes including automated systems controls supporting business processes in SAP.
Candidate has to be able to conduct IT risk assessment and scoping, detailed IT process and control design walkthroughs and meticulous testing of controls from a SOX standard and able to prepare preliminary findings, analyze alternative approaches and to demonstrate the capability to make presentations or lead meetings, including at the executive level. Proficiency in both oral and written English is required and SAP or equivalent ERP systems experience is highly desirable.
Working environment
Our high-performing employees are drawn by the challenging and rewarding professional, technical and industrial opportunities we offer, and are remunerated accordingly.
At Aramco, our people work on truly world-scale projects, supported by investment in capital and technology that is second to none. And because, as a global energy company, we are faced with addressing some of the world’s biggest technical, logistical and environmental challenges, we invest heavily in talent development.
We have a proud history of educating and training our workforce over many decades. Employees at all levels are encouraged to improve their sector-specific knowledge and competencies through our workforce development programs – one of the largest in the world.