**Core Responsibilities** - Support SOX and HIPAA controls by helping design, document, and maintain ITGCs and operational controls - Maintain documentation such as control narratives, flowcharts, risk and control matrices, and evidence repositories - Assist remediation efforts by coordinating with IT and business teams, validating remediation evidence, and tracking closure of deficiencies - Perform risk assessments and gap analyses for IT systems that handle PHI and financial data - Automate and monitor controls through scheduled reviews, scripts, or tooling to reduce manual effort and improve coverage - Support audits and vendor reviews by preparing workpapers, answering auditor questions, and helping with vendor control questionnaires - Perform vendor and third-party assessments for SaaS providers ensuring appropriate controls are in place and evidenced