|
Sarbanes-Oxley is a huge opportunity for a whole range of professionals, consultants and testers. The following text has been taken from a job advert. From it we link to various resources that we have available on our various sites.
Note. Do not contact us. 1) We are not an agency. We will ignore any e-mails that have try to send us a cv.
Large document imaging client based in Middlesex seeks SOX consultant to provide expertise to their business divisions across Europe. The main purpose of your role will be to organise and conduct ongoing management testing controls over user access to applications, change management of upgrades, and appropriate segregation of duties of technical staff. You will test components of Sarbanes-Oxley compliance by establishing testing strategies for business units or individual applications. Execute formal test scripts. Document results, and evidence of investigations to audit standards. And, ensure that all evidence is presented for external audit processes. All testing will follow a formally documented script producing an output, which can then be used to document and evidence compliance of the various business units. The successful candidate will have a commercial background in a user orientated IT environment, and posses an understanding of auditing or compliance assurance work. Travel may be required where neccessary, both UK and Europe wide.
The full job details can be found here.
Although Sarbanes-Oxley is a piece of U.S. legislation, foreign companies that list in America and subsidiaries of U.S. public companies have to comply with it.
Foreign companies have had longer to prepare for compliance due to an extension from the Securities and Exchange commissiomn.
This contract seems to focus on the testing of controls relating to testing of controls involved in IT controls. In particular access controls, user access and segregation of duties for technical staff.
The subject of testing is squarely in the area of section 404. It also connects with the interaction between Sarbanes-Oxley 404 and the Control Objectives for Information and related Technology (COBIT). COBIT is the industry standard for IT management.
|