SOX Analyst – SOC 1 & Service Provider Controls

SOX Analyst – SOC 1 & Service Provider Controls

Job Description:

SOX Contractor – Service Provider & SOC 1 Reviews

Location: Houston, Texas (On-site)

Role Overview

This organization is seeking a qualified SOX Contractor to support the Sarbanes-Oxley (SOX) Program. The successful candidate will assume primary responsibility for performing and documenting reviews of third-party service providers that impact internal control over financial reporting (ICFR). This position evaluates SOC 1 reports and related documentation to determine whether service-provider controls adequately address relevant financial reporting risks, and identifies whether additional controls or follow-up procedures are required. Collaboration with the SOX PMO, business and process owners, application owners, service-provider contacts, and external auditors is essential to ensure reviews are complete, appropriately documented, and audit-ready.

Key Responsibilities

• Perform end-to-end reviews of service providers relevant to SOX and ICFR.

• Evaluate SOC 1 Type II reports and supporting documentation for identified service organizations.

• Assess the scope of services, covered systems, report periods, and testing periods within SOC 1 reports.

• Analyze service auditor opinions, including qualified or modified opinions, alongside control objectives and activities.

• Review tests performed by the service auditor, associated results, control exceptions, deviations, and management responses.

• Evaluate Complementary User Entity Controls (CUECs) and Complementary Subservice Organization Controls (CSOCs).

• Assess subservice organizations and determine whether they are addressed using the inclusive or carve-out method.

• Determine if identified SOC 1 controls adequately address the financial reporting risks relied upon by the organization.

• Assess control exceptions to determine if additional organizational controls, remediation, or follow-up procedures are necessary.

• Map identified CUECs to existing internal SOX controls and confirm they are appropriately designed and operating.

• Required Qualifications

• Education: Bachelor's degree in Information Technology, Finance, or another relevant discipline.

• Experience: A minimum of 3 years of relevant professional experience in SOX compliance, IT audit, or internal controls.

• Technical

Skills

• Proficient in evaluating SOC 1 Type II reports, analyzing internal control over financial reporting (ICFR), mapping Complementary User Entity Controls (CUECs), and assessing third-party service provider risks.

• Overview of benefits: Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans; an ESPP and a 401K program; a Health Savings Account; an Employee Assistance Program with counseling; a corporate discount savings program and other discounts. Professional development includes on-demand training, access to certification prep, and a library of courses/books/seminars after tenure; certification discounts and other perks to associations. A dedicated customer service team for consultants and a certified Career Coach are available. A full list of benefits is available within the Welcome Packet.

• Everforth Apex is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Everforth Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law.

• If you require an accommodation under the Americans with Disabilities Act to participate in an interview with a virtual recruiter or to use our website for a search or application, please contact our accommodations department.

• Benefits

• Department accommodations contact for medical ADA accommodations.

• UnitedHealthcare creates and publishes the Transparency in Coverage Machine-Readable Files on behalf of Everforth Apex Systems.

Employee Type:

• Contract

Location

Houston, TX, US

Job Type:

Date Posted: November 10, 2026

Pay Range: $50 - $56 per hour

Similar Jobs

• Risk Controls Analyst
• Risk and Controls Lead- SOX Control & Compliance II
• IT General Controls Analyst
• Consultant, Business Controls
• Controls Engineer

Connect with our experts.

Looking for your next opportunity? View our jobs!