Execute on our IT compliance plan to ensure an effective internal control environment for SOX, SOC 2 and other regulatory requirements.
Develop and maintain ITGC process flows, procedural documentation and compliance strategies for key SOX applications in a complex SaaS environment.
Educate the IT organization on governance, risk and controls/compliance concepts.
Assist management in development and implementation of remediation plans related to IT controls and provide recommendations for improvements.
Assist in developing policies and procedure documents based on ISO27001/2 standards.
Support the management in identifying key technology risks, mitigation strategies and improvements to the business process.
Support risk and control considerations related to IT relevant projects, including vendor evaluations, system implementations, newly scoped systems, UAT documentation, onboarding of applications to ITGC processes and initial testing of application controls, etc.
Create and maintain internal control narratives, flowcharts and risk matrices.
Work closely with external parties for all matters related to IT, including IT issues related to SOC 1, SOC 2, SOX, and financial audits.