IT/SOX/Operations Controls Lead

we are working on Ariba project and have a requirement to lead and establish the IT, SOX Controls and Cloud Controls (Network & Security, Vulnerability, malware & Data protection controls etc.). Interaction with customer, mediating in providing the evidences and documenting the controls etc . We are looking for a strong profile with Network & Security controls background who needs to interact with customer and other vendors to optimize, define and document the controls policies.

Controls Area who can take the lead


§ Drive and lead project activities relating to controls for:
• Business Operational Controls - mostly same like IT controls.
• IT Controls - Define the IT controls for Ariba ( Network & Security, Vulnerability, malware & Data protection controls etc_
• SOX Controls - This is related to SAP Ariba SOX Controls.
• SOD/GRC (Pathlock) - This is a GRC integration project but currently moved out of release 1 scope.
• Mobile Apps - Will follow the mobile based controls policies.
• Palentir - Palantir is a cloud based reporting application and will follow the cloud controls policies.
• Seascape - Seascape is nothing but it's a SAP project name where one object is there to define SAP SOX control rule.
• Security - Team is already available to support the SAP security work


§ Document controls requirement based on existing To-Be process flows


§ Determine key activities and timeline and work with NG project teams to drive completion