Client is low maturity on SOX ITGC. AC is pushing to have a low # of SOX controls. Any other ways or system of gov u like to ensure ctls happen w/o them being a compliance req for PCI,,HIPAA etc?

like
Posting as :
works at
You are currently posting as works at

I used COSO framework as to map out the overall control environment , then used that as a chance to get IT to talk about their process at high level

like

Write a lot of imporovement observations and hope they take the feedback, but it's not your job to get them to be more mature.

Are you IA?

No more in a management role, trying to figure out the best way to build governance into the culture

Common controls.....but if ur taking governance that’s a longer discussion. Can I slide into ur DMs?

Exactly. If the company isn’t mature, common controls will fail every app.

Anyone who doesn’t know anything about ITGC’s and is counting you on their “number of SOX controls” (I see that all the time and some partners seem to value it) need to be schooled. You might have to do full scope for some apps and half scope for others and if they fail design (inevitably), there will be compensating controls.

Related Posts

What in-house/client-side agencies do good, creative work? Can creatives make a career out of jumping around client-side or do they need agency experience?

like

What is the most useful technical or soft skills for any mechanical engineer to have where you work? I’m curious to know what really matters for everyone and what makes a big impact on the team and business.

Specifics if you can; CAD tools, simulation, CAD speed or proficiency, industry or standards knowledge, GD&T, certifications, Microsoft Excel, presentation skills, technical writing, project management, self organization, great communication, teaching ability, relationship building, etc.

I recently took up a Customer Success Manger role at a engineering software company. Previously I was a Project Manager at the same company but wanted to move out of my engineering services role. I primarily took this role hoping to get exposure to providing SaaS services as company is transitioning at software cloud. My long term goal is to move into tech as my current customers are mostly in O&G. Is customer success a good entry point go get into one for the big tech companies?

likesmarthelpful

Any advice on how to handle an ECD in charge of your salary who says the only way to get a promotion or even a COL raise of any kind is through winning an award? Not consistently reliable and solid performance. Not keeping the client happy and profitable. “You either win an award, or all ya get is to keep your job.”
And yes, I’m aware leaving is always an option, but eager for any other advice how to navigate.

like

Tired of all the respectability politics. Just once I want to write what I really mean in an email or tell a client what I really think of them when they ask. F*cking tired of walking on eggshells and constantly wondering if I did or said the right thing in the right way or the right tone to make sure the people around me are comfortable. Who's doing that for me at work? Nobody.

like

It is my first year in consulting. I started as a PMO and at the moment I am a scrum master for an international project. I am very ambitious and would like to grow in the consulting world. Any tips or advices? It will be much appreciated.

like

McKinsey & Company Bain & Company URGENT ADVICE : Presenting to client in 10hours: how to be very time conscious?! Will have like 30m for 12 slides but when on stimulants find it very difficult to be conscious of time or even look at time when I’m busy presenting. Thoughts?! Boston Consulting Group McKinsey & Company Bain & Company Strategy&

like

My first 2 years was developing algorithms. Since last year I started business development, project management with outperforming achievement. What could be the next step if I don’t want to code?

like

I recently joined Accenture and manager has hard locked me for one of the project who is using old technology, although he told me abt the same on-call few days ago but since there was no confirmation frm him so I thought that is gone now but today I came to know they have hard locked me and now they can't backout . I dnt want to work on that and he is saying if i backout it will impact it performance. Pls helpAccenture

like

Just joined...not having the best experience so far. Used to sink or swim way, but this is something else. Project team is treating me like a dummy and an outsider. Pretty sure the interim ‘lead'

like

Are brand manifestos necessary? I’ve been doing branding for 12 years and both agency and clients put so much focus on it but it never really gets used/read after project is live.

like

I have been on a local project since my last h1b extension which is till 2022 - also got my visa stamped and have a valid visa till 2022. Deploying on a 5 month travelling project next week for which

Ideas or personal experience for fulfilling careers outside of advertising that may actually matter...ideally that our experience in project management and advertising can be a valuable asset 🤷‍♀️

like

Hi all! I’m a from R/GA NY who recently got laid off. If y’all know of any open strategist positions or anything equivalent(ish) on the client side pls send my way!

like

Hi all,

I am looking for a job as I was made redundant by my employer last week. I have 9 years of Investment Banking / Corporate Development (buyside) experience.

Looking for opportunities in Greater Toronto Area or remote position. I am also open for contractual / project based work.

Appreciate your support

like

I don’t have much energy to paint these days but knocked out a quick abstract during the holiday break. Ignore the messy edges - it was a study but I didn’t get any further on the project.

Post Photo
like

Has anyone ever asked to be taken off of an account or project? For months, I've been working with the most difficult client with the most vicious attitude. Most of what they're frustrated about isn't even our fault. I was recently promoted and don't want to make myself look bad, but the thought of doing more work for them makes my stomach turn. Is this a valid reason to be taken off a project? I'm not used to working with such rude people.

like

Made a brand video for a client would love some brutally honest feedback.

like

@EY GDS why are some folks hesitated to tell their project name to others in EY GDS? Are there any risks involved?

like

More Posts

2nd year thinking about making a move into a compliance role at a large public company. Concerned about two things: 1) is it too early to go in house given that I’m 3 months away from 3rd year and 2) is compliance a dead end within in house roles?

like

PwC Toronto assurance: being offered a job as a transfer from the US. I’ll be transferring as a senior associate 1 (aka this is my promo year). I’ll be either tier 1 or 2 since I’m an easy promote here in New York. I was offered 61k CAD assuming I’m tier 3. They said they might adjust it if my rating comes in higher. What should I expect if I were either tier 1 or 2? Trying to minimize the salary reduction…

like

I am a California teacher looking to relocate. My son is pushing for Boerne. I have spent most of my life in small private Christian schools and loved it! When I moved to public school the large class sizes and trauma/sped students filling my classroom burned me out. I moved to homeschool this year (with my same district) and love it!!! I am curious about teaching in Texas. Class sizes, special ed, private school, etc. Any thoughts would be appreciated!

PART TIME JOB!!!!!!

We are seeking a talented Rental Agent to join our thriving team! The ideal candidate for this position will enjoy fast-paced work, show creativity and have a high degree of professionalism when working with our residents. The Rental Agent is responsible for creating and maintaining successful relationships with landlords and closing rental inquiries efficiently.
TASK:
-You will contacting possible tenants, sending notices and ensure proper booking of rental property.

4

like

What are the type of companies (or specific companies) with amazing RSU comp? Also is it common only for Director level and above?

like

Any tips to get smarter about analytics and better at critical thinking as I get more senior in my role? I feel like my media department coworkers ask better questions and have better solutions (as they should). I have substantial knowledge like Google Analytics and various campaign metrics, but feel short compared to colleagues. Curious what courses, newsletters, etc may help.

likesmart

Hi all, Can anyone please refer me for any open roles in ETL testing.
YOE- 7.5 years
Currently serving NP
Preferred working mode: WFH.

Thanks in advance!

Hello fishes,

Any idea how much time will wipro take for salary negotiation after hr round?

like

I'm having a cold streak where a bunch of my leads are choosing to stay in the sidelines to "ride out" the volatility. I'm literally seeing this with everybody, from prospects to existing clients.

like

💪Do you have a resolution for this year?

Drop it below! Inspire someone else.

like

In consulting, it's not unreasonable to make 300-500k+ HHI by age 30. What's a good net worth goal by age 40 or 50?

Is 5m by 40 and 20m by 50 unreasonable if you're able to keep expenses low and invest?

funnylike

Joined Accenture in September 2021 and didn't get variable payout in November or December. Can I expect a VP in may 2022. What is the minimum VP given.?

like

Do you have to live in NYC or LA to make it in the entertainment industry?

like

Pharma companies with great tuition reimbursement. Thanks!

like

What's the most effective way for a small RIA to recruit FAs who have a few years experience, want to break away from large/corporate firms? I'm a $70M fee-only (commissions for insurance) independent RIA with a generous comp schedule that enables FAs to own their own book while they grow. As the owner, my focus is to help FAs succeed; as a firm, our focus is on client service and helping them succeed. I can afford a small salary, but not benefits. I'm especially interested in female FAs.

like

What is the salary range for the QA Mgr for the level 6 in Taiwan?

like

Are BB also hiring like crazy right now, or is it just M? And if I started at my current place like 3 months ago and let's say I get an offer from a MBB, would pivoting be frowned upon or be considered "burning bridges"?

like

So is $60 ph hour a reasonable hourly rate for a client-side contract Art Director role? I’m in the Seattle area but the company is in NYC.

like

Additional Posts in Risk Assurance

What is a good pay range for a senior IT auditor in a T2 city, 2 yoe.

like

I’ve had some frustrations with auditing building up over time, mainly related to the hours worked and the constant stress I feel. Lately, I’ve been feeling like Risk Assurance just isn’t for me. How do you all usually deal with these feelings?

like

How much of a pay decrease would you be willing to take to leave risk, if any

like

For a GRC position, can someone explain what comprises of a written exercise? Would appreciate any feedback.

like

Since the New Year my motivation has been at an all time low. Used to be excited over projects and lately been just cruising through and have had some very clumsy moments. Anybody lose their mojo along the way?

like

Any good certifications to pair with CISA? Besides cpa

Awe it is that time of year again. When I want to curl up into a ball in the corner of my closet and cry about how somewhere along the way... I made a massive mistake. 😜

likefunny

Thoughts on EY risk advisory?

like

What are the possible future opportunities if I want to make a career jump from risk assurance?

like

Any insight on pwc cloud and Intel automation practice?

If I had a dollar for every time the core team referred to an automated control as “Inherent Functionality”

likefunny

I have about 8 years of accounting experience and have been at Morgan Stanley for the past 5 years. I currently do AML Enhanced Due Diligence work on their GFC Advisory team. I love the what I do, I just want to get some experience at another company.
I also care deeply about D&I and am leader on the Black Employee Network Steering Committee at Morgan. Is anybody hiring either AML or Internal Audit Profesionals?

like

I am a second year associate and has been involved in IT audit, having done some technical review for unix and windows servers, I’m gaining interest in cyber security, any advice how to manoeuvre?

like

Are there any onsite or even online trainings that are relevant for Risk Assurance, Data analytics more towards Operational audits, Continuous Control Monitoring etc?

like

Just transferred from IT Audit to Strategy and Transactions. Been a goal of mine for a while so I’m happy to see it play out. Not posting just to say I did it, but because I’ve been following this bowl for a while and see people get negative about being pigeon holed. There were tons of transferable skills that I was able to highlight that got a role that’s completely different, so I just don’t want anyone feeling discouraged if they’re hitting walls.

like

Anyone seen any long-term, effective risk mgmt philosophies other than 3LoD (seen I.e. deployed in practice and stood the test of time at a mid-size+ company, not just a theory)?

likefunny

Is it possible to do RA in the tech space? I know someone mentioned working at FAANG. How hard is it to make this move?

like

Can someone from a risk background become a CISO?

like

I joined EY for their Risk Consulting practice because I wanted to break into consulting. I hope to get a top MBA sponsored as well. I hear from my colleagues that Risk isn’t considered the same as consulting and it’s not as valued for a top MBA...is this true?

likefunny

What kind of hours does PWC risk assurance work throughout the year? Fall busy season? Also, do you travel a lot?

like

New to Fishbowl?

Download the Fishbowl app to
unlock all discussions on Fishbowl.
That was just a preview…
Sign Up to see all discussions
  • Discover what it’s like to work at companies from real professionals
  • Get candid advice from people in your field in a safe space
  • Chat and network with other professionals in your field
Sign up in seconds to unlock all discussions on Fishbowl.

Already a user?
Login here

Share

Embed this post

Copy and paste embed code on your site

Preview

Download the
Fishbowl app

See what’s happening in your industry
from the palm of your hand.

A phone with Fishbowl app

Send download link to your phone

OR

Scan your QR code to download
Fishbowl app on your mobile

By continuing you agree to Terms of Use and Privacy Policy.

Messaging rates may apply

Download app

Sign up for free to view this conversation on Fishbowl

By continuing you agree to Terms of Use and Privacy Policy

Already have an account? Log in

Sign up for free to continue using Fishbowl

By continuing you agree to Terms of Use(New) and Privacy Policy(New)
Messaging rates may apply

Already have an account? Log in

For account settings, visit Fishbowl on Desktop Browser or

General

Legal