Enterprise IT SOX & ICFR compliance, including scoping, risk assessments, and control effectiveness evaluation ITGCs, application controls, and SDLC controls with gap analysis, remediation, and automation opportunities Authoring and maintaining IT control narratives, walkthroughs, and control documentation SOC 1 report review, third-party risk assessment, and CUEC evaluation Control testing, deficiency management, and remediation tracking through closure Audit support and cross-functional collab