The role provides independent and objective assurance and advisory support to
enhance organizational effectiveness and risk mitigation. The role evaluates the
reliability and effectiveness of risk management, governance, and internal
control processes across financial, operational, strategic, information
technology, compliance, and investigation audits. The position tests and
evaluates financial records, transactions, processes, and systems for SOX
compliance with applicable laws, policies, and agreements. The role works
collaboratively with internal compliance functions and external auditors to
identify gaps, anticipate risks, and strengthen controls. The role reports audit
findings, risks, and actionable recommendations to management to support
informed decision-making and continuous improvement.
Essential Functions:
* Sarbanes Oxley (SOX) Control Design and Testing (~60 – 70%):
* Perform all aspects of the Company’s SOX-404 compliance program for IT
including maintining the risk and controls matrix, providing control
training,
performing control walkthroughs and testing IT controls throughout
the year and closely aligning with the external auditors. Areas of focus
include:
* RCM: Working with IT management and the external auditors, proactively
maintain and update RCM for all IT controls, ensuring that Company has
appropriate and properly definced controls to address risks and ensuring that
the RCM is updated for process and system changes and to address changes in
risks.
* IT General Controls (ITGCs): Test the Company’s controls around logical
access, change management, and computer operations for all in-scope IT
systems and related infrastructure.
* SoD: Ensure the Company has effective controls to identify and address
segregation of duties (SoD) conflicts and periodically test the operating
effectiveness of the SoD controls.
* Sarbanes Oxley (SOX) Control Design and Testing (~60 – 70%):
* Perform all aspects of the Company’s SOX-404 compl