Execute SOX / ICFR compliance with a strong focus on IT General Controls (ITGCs), application controls, and Information Produced by Entity (IPE)
Perform and oversee testing of ITGCs (access management, change management, operations) and application controls
Partner with Engineering, Finance, and business teams to define control frameworks, including scoping, risk assessment, testing strategy, and deficiency evaluation
Act as a trusted advisor to control owners—driving improvements in IT control design and remediation efforts
Translate risks between IT systems and financial reporting in a complex, evolving environment
Monitor system and business changes (automation, new tools, expansions) and assess their impact on SOX controls
Review audit workpapers from co-sourced partners and ensure high-quality documentation