Drive IT SOX scope rationalization, dependency mapping, RACM development, and control optimization across cloud and SaaS environments. Support ITGC and ITAC testing, onboard new systems, document system dependencies, and partner with Finance, Risk, Security, and Platform stakeholders. Translate technical architecture and cloud-native processes into audit-ready documentation while identifying redundant or missing controls.

Performs SOX 404 IT control testing for access management, change management, and application controls across cloud and SaaS environments. Partners with Finance, Risk, Security, and Platform teams; supports control owners; uses analytics and automation to improve testing; and maintains compliant documentation. The role requires expertise in SOX, COSO, NIST, and ISO 27001 frameworks, cloud-native audits, CI/CD change management, and microservices access management.