Finance System Controls Analyst

Finance Systems Control Analyst 
Location flexible across our office network, Perth WA or Sydney NSW

• Reporting to the Internal Audit Manager
• Hybrid working model (2 days working from home & 3 days working in the office)

Compass Group is listed on the London Stock Exchange (Top 20) and is the global market leader in providing food and support services to customers in the workplace, schools and colleges, hospitals, at leisure and in remote environments. We operate in over 25 countries, employ c.600,000 people, and are a recognised top 10 employer worldwide.

In Australia, Compass Group Australia (CGA) currently generates $2.2bn revenue per annum, servicing over 350 clients across over 700 sites, with c.18,000 employees. We offer a supportive team culture in a value-based organisation with balanced ‘work from home’ arrangements. 

About the Role

The Finance Systems Control Analyst is a hands-on role within the CGA Control Assurance & Audit (CAA) function. The role supports the implementation and operation of IT General Controls (ITGCs), application controls and technology-enabled controls that underpin CGA’s transition to a SOX-like Internal Control over Financial Reporting control framework.

The position contributes to a reliable financial systems control environment by supporting documentation, testing, evidence validation, dashboards, remediation tracking and control owner engagement across financially relevant applications, interfaces, reports and system-dependent financial processes.

Working under the direction of the Finance System Controls Manager, the role partners with Finance, Technology, Cybersecurity, application owners and control owners to ensure system controls are clearly documented, consistently operated, supported by audit-ready evidence and improved where gaps are identified.

Responsibilities:

Financial systems control and ITGC support

• Support the design, documentation and ongoing operation of CGA’s ITGC, application control and technology-enabled financial control framework.
• Assist with documenting financially relevant applications, interfaces, system dependencies, key reports, automated controls and IT-dependent business controls.
• Maintain control documentation, including control descriptions, evidence requirements, test procedures, process notes, access review support and change management control records.
• Support the development and maintenance of technology RACMs and control libraries for financially relevant systems, aligned to SOX-like and ICFR readiness requirements.
• Engage with application teams and control owners to understand current processes and procedures that drive control design and control operation.

Testing, monitoring and evidence validation

• Assist in verifying and validating ITGCs, application controls and IT-dependent controls for design effectiveness, operating effectiveness and operational sustainability.
• Gather, review and validate control evidence to confirm completeness, accuracy, timeliness and retention against agreed evidence standards.
• Support planned and ad-hoc reviews of access management, user provisioning and deprovisioning, privileged access, change management, system monitoring, interfaces, key reports and automated controls.
• Maintain accurate and audit-ready testing records, control evidence, issue logs, action trackers and supporting documentation.
• Support coordination of information and evidence requests from Internal Audit, External Audit, Group Risk and Control and other assurance stakeholders.

Deficiencies, remediation and reporting

• Identify and document system control deficiencies, evidence gaps, financial control failures and  weaknesses.
• Support remediation tracking by following up with control owners, updating action trackers and confirming sufficient evidence of closure.
• Prepare clear reporting, dashboards and issue summaries on control performance, fraud incidents, remediation status and risk trends.
• Assist in maintaining consolidated reporting for IT risk, audit and compliance activity to support management decision assessments.

Automation, data and continuous improvement

• Assist in identifying opportunities to automate control evidence capture, compliance validation, exception monitoring and dashboard reporting.
• Use data analytics, reporting tools and structured analysis to identify control exceptions, access anomalies, change control gaps, monitoring failures or evidence quality issues.
• Support continuous improvement of control processes, job aids, user guidance, training materials and standard evidence templates.
• Contribute to periodic reviews and updates of technology control guidance, information security policies and compliance requirements where relevant to financial controls.
• Help build a practical, scalable and audit-ready control discipline across financially relevant systems and applications.

People, culture and stakeholder engagement

• Build productive working relationships with Finance, Technology, Cybersecurity, application owners, process owners and assurance stakeholders.
• Collaborate with the Financial Control Analyst where financial controls depend on systems, IT-dependent controls, key reports, IPE or automated controls.
• Support control owners by explaining evidence expectations, control operating requirements and remediation actions in clear business language.
• Uphold Compass values by promoting ethical behaviour, confidentiality, constructive challenge and a culture of accountability.

About You

• Proven 3+ years’ professional experience in IT controls, IT audit, technology risk, information security governance, financial systems control, compliance assurance, SOX/ICFR readiness or a related assurance discipline.
• Degree in Information Systems, Computer Science, Accounting, Finance, Commerce, Business or a related field is required.
• Professional development or working towards certification such as CISA, CISM, CRISC, CIA, CA/CPA, COBIT, ITIL or equivalent is desirable but not essential.
• Developing working knowledge of ITGC and technology control concepts including access management, provisioning, privileged access, segregation of duties, change management, interfaces, batch/job monitoring, automated controls, IPE and key reports.
• Understanding of SOX-like ICFR concepts, evidence standards, testing, control documentation, remediation tracking and audit-ready working papers is desirable.
• Strong capability in risk and control assurance testing (design and operating effectiveness), aligned to governance and risk frameworks.
• Strong experience preparing high‑quality reporting (PowerPoint), and creating data visualisation (Excel, Power BI, Tableau) for senior stakeholders.
• Demonstrated ability to analyse, evaluate and prioritise information and data to identify anomalies, financial risk indicators, fraud patterns or control gap and failures.
• Advanced analytical, problem‑solving and critical‑thinking skills with a high attention to detail.
• Excellent written and verbal communication skills with the ability to constructively challenge and influence.
• Strong coordination and team work, focusing on solutions, ability to meet deadlines and a dedication to continuous improvement.
• High level of integrity, confidentiality and sound judgement when handling sensitive information (including investigations).

If you're ready to take the next step in your finance systems control career and contribute to something bigger, we want to hear from you! For any questions, doubts, or for a confidential chat, please reach out to us at talisson@compass-group.com.au or gilzugmeyer@compass-group.com.au 

We are committed to ensuring a recruitment process that is fair, inclusive, and accessible to all. If you require any adjustments or alternative methods of communication during the process, please let us know—our team will support you in the way that works best for you.