About the job

At Hays Enterprise Solutions, our mission is to help organisations thrive by supporting their workforce needs. We partner with over thirty large organisations across Australia and New Zealand providing tailored solutions to ensure our clients have unrivalled access to top talent and unique market insights to build their evolving workforces.

Our client is seeking an IT Internal Control Specialist to join their Technology team on a 9‑month fixed-term contract. As a key member of the IT team, you will play a vital role in delivering exceptional support to the business.

We are looking for a detail-oriented Policy & SOX Controls Analyst to join our team and play a key role in strengthening our internal control environment and policy governance framework.

In this role, you will design, document, and map SOX controls while ensuring they are clear, testable, and audit-ready. You will also own the development and maintenance of organisational policies, standards, and procedures, helping ensure alignment with regulatory requirements and business objectives.

You will collaborate closely with stakeholders across Technology, Security, Risk, Internal Audit, and Operations, contributing to improved control maturity and compliance outcomes.

Your Responsibilities:

SOX Controls & Internal Controls:

• Design and document SOX IT General Controls (ITGC) that are well-defined, testable, and evidence-based.
• Map controls to frameworks, business processes, and system controls.
• Rationalise and optimise controls to reduce duplication and testing burden.
• Develop key artefacts including control matrices, narratives, and evidence guides.

Policy Development & Governance:

• Draft, review, and maintain policies, standards, procedures, and guidelines.
• Ensure policies are clear, practical, and aligned with risk and compliance requirements.
• Manage the full policy lifecycle including versioning, approvals, and publication.
• Create supporting materials such as process flows and RACI matrices.

Policy Analysis & Improvement:

• Conduct policy gap analyses against regulations, standards, and audit findings.
• Identify overlaps, inconsistencies, and improvement opportunities.
• Track remediation and support continuous policy optimisation.

Your skills and experience:

• Experience in SOX, IT controls, risk, compliance, or audit.
• Strong policy writing and documentation skills.
• Solid understanding of control frameworks (e.g. COSO, COBIT, ITIL).
• Ability to translate complex requirements into clear, practical documentation.
• Excellent stakeholder engagement and communication skills.
• Highly organised with strong attention to detail.

Your qualifications:

• Degree qualification in IT or equivalent experience desired.
• 5+ years’ accumulative IT industry experience required.

• Design and document SOX IT General Controls (ITGC) that are well-defined, testable, and evidence-based.
• Map controls to frameworks, business processes, and system controls.
• Rationalise and optimise controls to reduce duplication and testing burden.
• Develop key artefacts including control matrices, narratives, and evidence guides.
• Draft, review, and maintain policies, standards, procedures, and guidelines.
• Ensure policies are clear, practical, and aligned with risk and compliance requirements.
• Manage the full policy lifecycle including versioning, approvals, and publication.
• Create supporting materials such as process flows and RACI matrices.
• Conduct policy gap analyses against regulations, standards, and audit findings.
• Identify overlaps, inconsistencies, and improvement opportunities.
• Track remediation and support continuous policy optimisation.

• Experience in SOX, IT controls, risk, compliance, or audit.
• Strong policy writing and documentation skills.
• Solid understanding of control frameworks (e.g. COSO, COBIT, ITIL).
• Ability to translate complex requirements into clear, practical documentation.
• Excellent stakeholder engagement and communication skills.
• Highly organised with strong attention to detail.

• Degree qualification in IT or equivalent experience desired.
• 5+ years’ accumulative IT industry experience required.