Analyst, IT Compliance & SDLC Governance

About Solaris Energy Infrastructure

Qualifications

• Bachelor’s degree in Accounting, Information Systems, Computer Science, or a related field is required
• 7+ years of enterprise IT lifecycle experience with a focus on SDLC governance, risk, audit, or compliance
• Prior leadership experience, whether managing people, leading a control program, or owning a governance function across teams
• Direct responsibility for Sarbanes-Oxley IT general controls, including Program Development and Program Change controls
• Demonstrated command of the ITGC control domains: access to programs and data, program change, program development, and computer operations
• Practical understanding of the software development lifecycle — version control, environment separation, code review, release types, deployment patterns, and CI/CD — and how to control each without obstructing delivery
• Experience designing and testing change management controls in an environment with internally developed software, not only purchased applications
• Experience performing control or quality reviews of completed delivery work and driving corrective action
• Experience developing, executing, and reporting performance and risk metrics, and summarizing findings for technical, executive, and audit audiences
• Experience serving as a primary liaison to internal and external auditors, including evidence preparation, walkthrough facilitation, and remediation
• Experience working across cross-functional teams in a regulated or publicly traded environment
• Advanced verbal, written, and presentation skills, with strong stakeholder management — including the ability to hold a firm position with technical teams and leadership while remaining a partner rather than an obstacle
• Working familiarity with delivery and governance tooling such as Jira, Azure DevOps, ServiceNow, SharePoint, Confluence, and reporting tools including Excel and Power BI
• Ability to work onsite at the Houston corporate office
• CISA, CIA, CPA, or CRISC certification
• Public accounting or Big Four IT audit experience
• Experience evaluating SOC 1 and SOC 2 reports and assessing complementary user entity controls
• Experience in a company that implemented or stabilized SAP S/4HANA, including post-go-live control remediation
• Experience with SAP GRC, NetSuite, SuccessFactors, or Salesforce control and role design
• Experience bringing an acquired company into an existing SOX control environment
• Experience with governance, risk, and compliance tooling or control automation platforms
• Experience using data analytics to drive process improvement and control automation
• Familiarity with cybersecurity frameworks such as NIST CSF or CIS Controls
• Prior experience in energy, oilfield services, industrial, or manufacturing environments
• Credible with engineers and auditors alike – holds the line on control requirements without becoming the department that says no, and knows the difference between a real deficiency and an auditor preference
• Disciplined documentarian – keeps standards, evidence, and remediation tracking current year-round rather than assembling them under deadline
• Lean by instinct – designs controls that make delivery more predictable instead of simply adding approval gates
• Exceptional communicator – direct and transparent, skilled problem-solver with proven success in building coalitions and avoiding conflicts
• Total ownership mentalit y – proactively identifies and removes obstacles across numerous ongoing tasks
• Independent thinker – provides original thoughts and constantly asking "how can we do this better"
• Innovative thinker – willingness to consider novel solutions and ability to adapt to change
• Desirable teammate – impeccable character, humility, and collaborative
• Relentless – aspires to contribute and achieve his/her full potential