Gto Sox/internal Audit Compliance

Please Note:
**Job Description**:
Enterprise End-user Services & Experience (EESE) organization of Broadcom Inc Global Technology Organization (GTO) is a technology forward organization constantly scanning the industry for new innovative solutions to implement. The team of highly motivated individuals do not shy away from exploring, testing and introducing leading edge technology that will both increase efficiencies and enhance end-user experiences. With Cloud First tenet as our guiding principles, Broadcom GTO implements leading edge new technology and services that increases the effectiveness and efficiencies of the workforce.

The team is looking for a dynamic individual with knowledge and experiences in SOX/Internal audit compliance (particularly in IT General Controls) and ITSM process governance (specializing in Change and Release Management). The individual is expected to have a degree in Information Technology or similar course, with a minimum of 2 years related experience. He/She will co-own the GTO SOX Compliance and Change Management process, and gradually be cross trained for other ITSM processes.

The SOX/Internal Audit Compliance & ITSM Process Governance role reports into the Support Services Team in the Global Technology Organization. This role looks to ensure IT compliance to SOX, where change management is one of the key controls.

**Job Description**:
- SOX/internal Audit Compliance- Liaise with Broadcom internal auditors and external auditors to define and agree on SOX IT General Controls (ITGC)-
- Identify control owners for each ITGC, then train & communicate their roles and responsibilities to them.-
- Assess effectiveness of IT control framework; Perform regular reviews with auditors and control owners to ensure the ITGCs are still relevant and effective-
- Provide support to Internal and External Auditors during audit by-
- Being the main point of contact for ITGC walk-throughs and follow-up questions.
- Securing required evidences from various OSP (Outsource partners) within specified timeline
- Manage and train representatives from the OSPs to collect evidence in the required format and level of detail.-
- Review and update audit-related documentation as part of audit preparation-
- Maintain evidentiary documentation per execution of recurring controls.-
- Monitor audit gap/findings remediation efforts-
- Look out for continuous improvement opportunities in the audit compliance scope, eg. automation of repetitive manual tasks-
- Conduct risk impact assessment-
- Recommend improvements to IT control execution and/or design-
ITSM Process Governance- GTO support is a mix of outsource and insource teams. Hence, this individual must work on IT Process Governance for both outsource and insource teams (initially for Change and Release Management, and eventually for other ITSM processes as well)-
- Carry out continuous monitoring activities to ensure adherence to processes, automating where feasible.-
- Prepare and/or coordinate the preparation & update of training material and knowledge articles to enable self-paced learning and easy reference anytime anywhere.-
- Define, review and approve monthly SLAs that are related to ITSM processes.-
- Coordinate and ensure process assessment, especially for the OSPs, are done regularly.-
- Work with ITSM Tools team to address any challenges faced by process and support teams, and at the same time, leverage on any new useful features.Advantageous if the incumbent have the following skills:
- Working knowledge of Sarbanes-Oxley Act (SOX) and related controls.- ITIL certification.- Good communication skills as the incumbent will need to liaise with internal and external auditors, and all GTO teams (both insource and outsource) and their managers.- Good knowledge of IT Operations processes and how it could impact SOX compliance.- Able to explain and convey auditors’ point of view to control owners and support teams in a manner that they can understand and appreciate.- Eye for detail- Assertive without being rude- Persistent but not annoying- Good at organizing and managing data- Able to step back, and reassess a situation or process objectively (no “tunnel vision”)

Broadcom is proud to be an equal opportunity employer. We will consider qualified applicants without regard to race, color, creed, religion, sex, sexual orientation, gender identity, national origin, citizenship, disability status, medical condition, pregnancy, protected veteran status or any other characteristic protected by federal, state, or local law. We will also consider qualified applicants with arrest and conviction records consistent with local law.

If you are located outside USA, please be sure to fill out a home address as this will be used for future correspondence.