Ensuring that IT processes comply with corporate policies, best practices, and IT frameworks (Incident, Problem, Change, Request, Service Catalog, CMDB):
developing and maintaining the ITGC framework;
designing and implementing methodologies for IT risk management;
developing documented IT policies, processes, procedures, and standards;
maintaining the inventory of SOX in-scope IT systems and infrastructure supporting financial reporting controls
Performing regular and ad-hoc IT internal control audits, including:
evaluating the design of IT controls (Test of Design);
testing the operating effectiveness of IT controls (Test of Operating Effectiveness);
reviewing SOC 1 Type 2 reports, defining CUECs, and assessing vendor compliance;
identifying control gaps and recommending remediation actions;
