Sr. Business Process Control Analyst (Finance & Records)

Finance professionals safeguard sacred funds—donated confidentially in obedience to God’s commandments—by designing, implementing, and maintaining financial controls that support the Church’s religious mission under the direction of senior ecclesiastical leaders.

The Sr. Business Process Control Analyst is responsible for ensuring audit readiness, control defensibility, and regulatory compliance across financial processes within an Oracle-based financial environment. This role provides hands-on leadership and subject-matter expertise in financial risk management, business process controls, and audit coordination, leveraging Governance, Risk, and Compliance (GRC) / Integrated Risk Management (IRM) capabilities (e.g., ServiceNow).

This is an advanced professional, individual contributor role with lead-level responsibility and influence.

A Day in the Life

No days are the same—but each one is grounded in purpose, precision, and partnership.

You might start your day by reviewing the status of key controls in Oracle Financials, ensuring that critical processes such as Record-to-Report or Procure-to-Pay operate effectively and are fully supported by clear, defensible documentation.

Later in the morning, you could collaborate with process owners and technology teams to strengthen a control design—either by embedding it directly into an Oracle workflow or by refining its tracking in ServiceNow GRC. Your ability to translate risk into practical, sustainable controls makes you a trusted advisor across teams.

By midday, you may be coordinating with internal or external auditors—walking through control logic, supporting testing activities, or addressing questions with clarity and confidence. You understand what makes a control not just compliant, but defensible .

In the afternoon, your focus might shift to risk analysis and continuous improvement. You could be evaluating control gaps, rationalizing redundant controls, or supporting an Oracle enhancement initiative to ensure controls are built into the process from the start—not added after the fact.

Throughout the day, you engage with stakeholders at multiple levels, including senior ecclesiastical leaders, bringing a steady, thoughtful approach to safeguarding resources that are both financially and spiritually significant.

And while the work is technical, the impact is deeply meaningful—every control strengthened, every risk mitigated, contributes to protecting sacred funds and enabling a global mission.

Key Responsibilities

• Business Process Risk & Controls Alignment
• Lead the alignment of business process (L4) risks and controls for assigned financial processes, ensuring controls are appropriately designed and implemented in preparation for design, build, and test phases.
• Ensure business process controls are accurately mapped to Oracle-based processes and support GRC / IRM tooling.
• Support the application of established governance standards to manage financial risk and control consistency.
• Audit Readiness & Control Defensibility
• Ensure assigned financial processes and controls are audit-ready, including clear documentation, consistent execution, and reliable supporting evidence.
• Serve as a primary audit-facing contact for business process controls, supporting walkthroughs, testing activities, and auditor inquiries.
• Lead the maintenance and review of risk-control mappings, control narratives, and test procedures within GRC / IRM platforms to ensure clarity, completeness, and defensibility.
• Support the identification, analysis, and remediation of control deficiencies and audit findings.
• GRC / IRM Enablement & ITGC Support
• Utilize GRC / Integrated Risk Management (IRM) tools (such as ServiceNow) to document, track, and monitor business process risks, controls, and issues.
• Support the design, documentation, and testing of IT General Controls (ITGCs) in coordination with IT, Security, and Audit teams.
• Ensure system-related controls are correctly configured, evidenced, and traceable within GRC / IRM tooling.
• Controls Implementation & Issue Resolution
• Lead the implementation of manual and automated business process controls, including requirements definition, detailed design, testing, and deployment.
• Identify control gaps, execution issues, or audit concerns and collaborate with stakeholders to implement timely and sustainable resolutions.
• Track remediation actions in GRC / IRM tools and validate effective closure of audit issues.
• Collaboration, Documentation & Enablement
• Work closely with Finance, IT, Audit, Compliance, and business stakeholders to gather requirements, provide status updates, and ensure alignment on control expectations.
• Maintain comprehensive, audit-ready documentation of controls, risks, issues, and governance artifacts.

• Provide guidance and training to stakeholders on controls execution, evidence standards, and audit preparation practices.
  

  Key Challenges

• Ensuring business process risks and controls remain aligned with Oracle-based processes and GRC / IRM systems during system changes and implementations.
• Maintaining consistent, audit-ready documentation and evidence across complex financial processes.
• Lead the coordination across multiple stakeholders to meet audit and compliance requirements without direct authority.

Required:

Education:

Work Experience:

Demonstrated Skills & Abilities:

• Professional experience in IT business operations, business and systems analysis, and process design with a thorough understanding of general desktop computing, including database and spreadsheet functionality
• Strong understanding of business process controls, IT General Controls (ITGC), and audit practices.
• Experience supporting or leading audit activities, including walkthroughs, testing, and remediation.
• Familiarity with GRC / IRM platforms (e.g., ServiceNow).
• Strong analytical, documentation, and communication skills.
Ability to work collaboratively with cross-functional teams.

Specific Degrees, Certifications, Licenses:

Preferred:

• Master's degree
• Certification in Accounting, Audit, or Risk (e.g., CPA, CIA, CISA, CRMA).
• Hands-on experience configuring or administering GRC / IRM tools.
• Familiarity with internal business control and governance frameworks (e.g., COSO).