SOX ITGC Consultant

HP; Tlaquepaque; On-site; MXN 900,000 - 1,200,000; Full time

Job summary

HP is seeking an IT Compliance role in Mexico to partner with senior IT leadership, manage audit activities, and define information needs to sustain service levels. You will interact with vendors and multiple IT teams to ensure regulatory alignment, implement controls, and support risk assessments throughout the SDLC.

Strong communication and regulatory knowledge are required. The role reports to senior management within IT Risk Management and Compliance, focusing on governance, risk, and

Qualifications

• Bachelor’s degree in Business Administration or MIS and related fields.
• Experience in IT controls, IT risk management or IT compliance.
• Knowledge of IT SOX controls and regulatory requirements.

Responsibilities

• Engage with IT teams, Auditors and Legal as needed.
• Help manage audit activities and coordinate with stakeholders.
• Develop and sustain relationships across IT support/business teams to drive compliance improvements.
• Communicate IT decisions relevant to IT support teams and business units.
• Support SOX controls testing and action plan delivery with audit teams.
• Review SDLC processes for regulatory compliance and risk controls.
• Provide guidance on automation to streamline compliance processes.
• Conduct risk assessments to identify compliance risks in the SDLC lifecycle.

Skills

IT compliance

Audit activities

Vendor management

Regulatory knowledge

SOX controls

Risk assessment

Documentation & communication

Power BI connections

Education

Bachelor’s degree in Business Administration

Certifications such as CISA, CPA, CA or MBA

Tools

Power BI

Macros (VBA)

Job description

Description

HP is a proven leader in personal systems and printing, delivering innovations that empower people to create, interact, and inspire like never before. We leverage our strong financial position to extend

Role Overview

Role will be reporting to senior management of IT Compliance under the IT Risk Management and Compliance Division. This role is responsible for developing IT strategies aligned with a high-impact business agenda and collaborating with vendors and senior management to define information needs and sustain service levels. The role assists in managing IT spends and investments, resolving operational issues directly with clients, and serving as a representative of relevant stakeholders to ensure consistency in plans between IT and respective entities.

Responsibilities

• Engage with IT teams, Auditors & Legal as needed
• Help manage audit activities
• Establishes and maintains relationships with several IT support/business teams. Uses deep business knowledge and business acumen to drive improvements in IT engagement for this initiative.
• Communicates specific IT decisions relevant to the IT support teams/business
• Facilitate securing management responses from respective HP Global IT leadership
• Meet aggressive timelines, deliver quality product and work well in a dynamic team environment
• Demonstrate an understanding of standard IT processes and tools
• Demonstrate understanding of audit and compliance
• Open to implement automation where possible to help improve the process
• Establishes and maintains relationships with several IT support/business teams. Uses deep business knowledge and business acumen to drive improvements in IT engagement for this initiative.
• Meet aggressive timelines, deliver quality product, and work well in a dynamic team environment. Demonstrate an understanding of standard IT processes and tools.
• Supporting team manager with various activities to help drive the various projects within the team to meet the goals.
• Engage with IT teams, Auditors & Legal as needed and help manage audit activities.
• Contribute as part of the second Line of Defense to the compliance of applicable laws & Regulations, Internal codes of practice/Standards and policy and procedures.
• Support management with delivery of action plans for AIR raised, Audit and SOX Controls testing.
• Ensuring that approved IT General controls are embedded in the current service lines and processes across HP.
• Analyze SOC reports (e.g., SOC 1, SOC 2, SOC 3) prepared by service organizations to assess the effectiveness of their controls related to financial reporting, security, availability, processing integrity, confidentiality, and privacy.
• Gain a deep understanding of the control objectives outlined in the SOC reports and the criteria against which the controls are evaluated.
• Establishes and maintains relationships with other teams. Uses specific business knowledge and general business acumen to support effective IT engagement for major initiatives.
• Review all the project deliverables in accordance with SDLC framework.
• Stay updated on relevant regulations and standards applicable to the industry, Evaluate and recommend improvements to business practices, processes, and controls.
• Conduct risk assessments to identify potential compliance risks and vulnerabilities within the SDLC process.
• Develop mitigation strategies and controls to address identified risks and ensure that compliance risks are effectively managed throughout the development lifecycle.
• Provide support to internal and external auditors and auditees.
• Plan and conduct regular audits and reviews of software development processes to assess compliance with regulatory requirements and internal policies.
• Identify non-compliance issues, deviations from standards, and areas for improvement, and work with stakeholders to address them effectively.
• Develop and deliver training programs to educate development teams and other stakeholders on compliance requirements, best practices, and policies related to software development.
• Foster a culture of compliance awareness and accountability within the organization.
• Evaluate and monitor third-party vendors, suppliers, and partners involved in the software development process to ensure that they adhere to compliance requirements and contractual obligations.
• Continuously assess and improve compliance processes, controls, and procedures to enhance efficiency, effectiveness, and alignment with evolving regulatory requirements and industry best practices.
• Solicit feedback from stakeholders and incorporate lessons learned into compliance initiatives.

Education & Experience Recommended

Bachelor’s degree or equivalent experience and a minimum of 4-6 years of related experience or a master’s degree and a minimum of 4 years’ experience.

Knowledge and Skills

Exceptional written and verbal skills. Strong business experience in multiple business sub-domains. Strong relationship management skills. Excellent project management and process development skills.

• Bachelor’s degree in Business Administration, Management Information Systems
• Certifications such as CISA, CPA, CA or MBA are plus
• Strong IT & audit experience, particularly IT controls or related financial risk assessment
• Experience with IT SOX controls a strong plus
• Understanding of application risk assessment and management methodologies
• Experience working with internal audit departments
• Strong documentation and communication (verbal and written) skills
• Demonstrated understanding of information management systems and infrastructure including IT processes, tools, controls & KPI's
• Strong communication and presentation skills
• Knowledge in the areas of robotics, automation via macros, workflows and Power bi connections would be a plus

Disclaimer

• This job description describes the general nature and level of work performed in this role. It is not intended to be an exhaustive list of all duties, skills, responsibilities, knowledge, etc. These may be subject to change and additional functions may be assigned as needed by management.

Job

Data & Information Technology

Schedule

Full time

Shift

No shift premium (India)

Equal Opportunity Employer (EEO)

HP, Inc. provides equal employment opportunity to all employees and prospective employees, without regard to race, color, religion, sex, national origin, ancestry, citizenship, sexual orientation, age, disability, or status as a protected veteran, marital status, familial status, physical or mental disability, medical condition, pregnancy, genetic predisposition or carrier status, uniformed service status, political affiliation or any other characteristic protected by applicable national, federal, state, and local law(s). Please be assured that you will not be subject to any adverse treatment if you choose to disclose the information requested. This information is provided voluntarily. The information obtained will be kept in strict confidence. For more information, review HP’s EEO Policy or read about your rights as an applicant under the law here: “Know Your Rights: Workplace Discrimination is Illegal"