IT Compliance - SOX ITGC Expert

Job Summary

Description -

HP is a leading technology company, with 8 decades of rich history, operating in more than 170 countries around the world committed to creating technology that makes life better for everyone, everywhere. Following a truly employee first culture, we are guided by the HP Way that creates a culture of mutual trust, empowerment and excellence.

HP has an impressive portfolio and strong innovation pipeline across areas such as:

• Blended reality technology - our unique Sprout by HP will change the way people do things

  
  

• 3D printing

  
  

• Multi-function printing

  
  

• Ink in the office

  
  

• Tablets, phablets, notebooks

  
  

• Mobile workstations

  
  

We are looking for visionaries who are ready to make an impact on the way the world works. At HP, the future is yours to create!

Role will be reporting to senior management of IT Compliance under the IT Risk Management and Compliance Division.

• This role is responsible for developing IT strategies aligned with a high-impact business agenda and collaborating with vendors and senior management to define information needs and sustain service levels. The role assists in managing IT spends and investments, resolving operational issues directly with clients, and serving as a representative of relevant stakeholders to ensure consistency in plans between IT and respective entities. The role identifies opportunities for leveraging standardized IT solutions and advocates for best practices. The role also cultivates relationships with tactical leaders and contributes to complex projects while providing mentoring and guidance to lower-level employees.
Responsibilities

In the areas of IT General Control Framework management, key responsibilities include but are not limited to the following: 

• Engage with IT teams, Auditors & Legal as needed 

  
  

• Help manage audit activities 

  
  

• Establishes and maintains relationships with several IT support/business teams. Uses deep business knowledge and business acumen to drive improvements in IT engagement for this initiative.  

  
  

• Communicates specific IT decisions relevant to the IT support teams/business 

  
  

• Facilitate securing management responses from respective HP Global IT leadership 

  
  

• Meet aggressive timelines, deliver quality product and work well in a dynamic team environment. 

  
  

• Demonstrate understanding of audit and compliance.  

  
  

• Establishes and maintains relationships with several IT support/business teams. Uses deep business knowledge and business acumen to drive improvements in IT engagement for this initiative.

  
  

• Engage with IT teams, Auditors & Legal as needed and help manage audit activities.

  
  

• Contribute as part of the second Line of Defense to the compliance of applicable laws & Regulations, Internal codes of practice/Standards and policy and procedures.

  
  

• Support management with delivery of action plans for AIR raised, Audit and SOX Controls testing.

  
  

• Ensuring that approved IT General controls are embedded in the current service lines and processes across HP.

  
  

• Analyze SOC reports (e.g., SOC 1, SOC 2, SOC 3) prepared by service organizations to assess the effectiveness of their controls related to financial reporting, security, availability, processing integrity, confidentiality, and privacy.

  
  

• Gain a deep understanding of the control objectives outlined in the SOC reports and the criteria against which the controls are evaluated.

  
  

• Develop mitigation strategies and controls to address identified risks and ensure that compliance risks are effectively managed throughout the development lifecycle.

  
  

• Provide support to internal and external auditors and auditees.

  
  

• Plan and conduct regular audits and reviews of software development processes to assess compliance with regulatory requirements and internal policies.

  
  

• Identify non-compliance issues, deviations from standards, and areas for improvement, and work with stakeholders to address them effectively.

  
  

• Develop and deliver training programs to educate development teams and other stakeholders on compliance requirements, best practices, and policies related to software development.

  
  

• Foster a culture of compliance awareness and accountability within the organization.

  
  

• Evaluate and monitor third-party vendors, suppliers, and partners involved in the software development process to ensure that they adhere to compliance requirements and contractual obligations.

  
  

• Solicit feedback from stakeholders and incorporate lessons learned into compliance initiatives.

  
  

Education & Experience Recommended
• Four-year or Graduate Degree in Computer Science, Information Technology, or any other related discipline or commensurate work experience or demonstrated competence.
• Typically has 7-10 years of work experience, preferably in IT projects, process improvement, or a related field.
Knowledge & Skills

Exceptional written and verbal skills. Strong business experience in multiple business sub-domains. Strong relationship management skills. Excellent project management and process development skills. 

• Bachelor’s degree in Business Administration, Management Information Systems 

  
  

• Certifications such as CISA, CPA, CA or MBA are plus 

  
  

• Strong IT & audit experience, particularly IT controls or related financial risk assessment 

  
  

• Experience with IT SOX controls a strong plus 

  
  

• Understanding of application risk assessment and management methodologies 

  
  

• Experience working with internal audit departments 

  
  

• Strong documentation and communication (verbal and written) skills 

  
  

• Demonstrated understanding of information management systems and infrastructure including IT processes, tools, controls & KPI's 

  
  

• Strong communication and presentation skills 

  
  

• Knowledge in the areas of robotics, automation via macros, workflows and Power bi connections would be a plus 

  
  

Cross-Org Skills
• Effective Communication
• Results Orientation
• Learning Agility
• Digital Fluency
• Customer Centricity

Impact & Scope
• Impacts function and leads and/or provides expertise to functional project teams and may participate in cross-functional initiatives.
Complexity
• Works on complex problems where analysis of situations or data requires an in-depth evaluation of multiple factors.
Disclaimer
• This job description describes the general nature and level of work performed in this role. It is not intended to be an exhaustive list of all duties, skills, responsibilities, knowledge, etc. These may be subject to change and additional functions may be assigned as needed by management.