Design and implement internal controls across financial reporting, revenue, procurement, payroll, and access management. Build SOX-readiness roadmap and lead SOX 404 implementation. Manage external audit interactions, perform control testing and remediation, assess business processes, own risk assessments, support SOC 1/SOC 2 readiness, draft policies, support due diligence, and recommend scalable systems and tools.