Grazia Giordano

Oversight the entire Sarbanes-Oxley Act (SOX) compliance process at the Group level, including:

• Collaborating with external auditors to assess financial risks and define the scope of SOX compliance.
• Managing the Governance, Risk, and Compliance (GRC) system maintenance, and conducting training sessions for all users involved in the testing activities (internal and external resources).
• Assisting control owners in implementing remediation activities to address identified SOX issues.
• Guiding the organization in governing the overall internal controls framework, emphasizing standardization and efficiency.
• Coordinating with external auditors throughout key phases of the SOX program, such as scoping, test plan development, report distribution, and status updates.
• Creating materials to regularly update the Audit Committee and other stakeholders on the SOX program's status.
• Providing guidance and instructions for the ICFR activities (e.g. Roll Forward, Deficiency Analysis).
• Supporting PMO Central Team on economics (budget/forecast) impacting compliance cost

Support FCA and CNHi Group for SOX process improvement and testing activities in order to ensure compliance with the SOX requirements. More in details:

• Evaluation and validation of internal controls performing test of design and test of effectiveness;
• Management support for the implementation of Action Plans identified during the testing activities;
• Coaching and training for new joiners in the team.

Below the main activities performed for clients operating in different sectors (automotive, energy & utilities, technology & telecommunication):

• Analysis of business processes that affect financial statements;
• Controls Mapping;
• Execution of test of design and test of effectiveness of the controls;
• Execution of IT General Controls;
• Data management with CAAT (Computer Assisted Auditing Techniques);
• Compliance Projects to Sarbanes Oxley Act and DL 262/2005.