I map how work actually happens today - not how the org chart says it happens - through direct interviews with the people doing the work, finance, IT, procurement, and audit.
I identify where controls are missing, weak, or undocumented, and prioritize fixes by audit and operational risk.
I draft clear, practical SOPs and control matrices, built with the process owners so they're realistic to follow, not just compliant on paper.
I support training and adoption, and stay engaged through the first audit or review cycle to confirm the new processes hold up.
"A control that only exists in a policy document isn't a control.
My job is making sure it's actually followed."