SOX Compliance Risk Assessment Evaluation

I’m looking to tighten our SOX-related internal control framework and need a specialist who can dive straight into the compliance-risk portion of our risk assessment. The groundwork is already in place; what I need now is a sharp evaluation of those identified compliance risks—how likely they are to materialise, how severe the impact could be, and which existing controls truly mitigate them.

You’ll work with the documentation we’ve compiled (process narratives, control descriptions, prior walkthrough notes) and apply COSO and SEC Section 404 guidance to score each risk, note control design or execution gaps, and recommend practical remediation steps. I expect clear rationales for every rating, with supporting evidence that will stand up to both internal audit review and our external auditors.

Deliverables:
• Updated risk register with probability/impact scoring
• Gap analysis highlighting weak or missing controls
• Actionable remediation plan, prioritised by risk severity

If you’re comfortable using common SOX tools—risk matrices in Excel, flow-charting in Visio, and straightforward narrative write-ups—this should be right in your wheelhouse. Let me know your availability and any similar projects you’ve wrapped up recently so we can move forward quickly.