MossAdams - Jennifer Grant

Industry Expertise

E-Commerce Life Sciences Oil & Gas Retail

Practice Focus

Internal Audit IT Compliance Process & Internal Controls SOC Examinations SOX 404 Compliance

Biography

Jennifer has worked in public accounting and risk management since 2003. She has managed both enterprise risk management (ERM) and SOX compliance programs for multinational corporations, which included evaluating business and IT processes and controls, implementing risk assessment models and developing remediation plans for control gaps. With a strong background in retail, technology, life sciences, and oil and gas, Jennifer is experienced in working with companies to establish SOX compliance programs as part of their first year compliance efforts, as well as ongoing program improvements to address new and emerging risks. Jennifer has worked for Big 4 and national accounting firms, and returned to Moss Adams after six years as a compliance program manager for a large international retailer.

Professional Affiliations

Member, Institute of Internal Auditors
Member, Information Systems Audit and Control Association

Education

BS, management information systems, Louisiana State University

Insights from Jennifer Grant

PCAOB Focus Areas for IT Dependencies

Learn about the Public Company Accounting Oversight Board (PCAOB) inspection process, how to assess compliance, and more.

PCAOB: Controls, Inspections & the Impact on External Audit

Following auditor guidance can help companies refine Sarbanes-Oxley Act (SOX) Section 404 programs to navigate risks, streamline operations, and more.

Prepare for Third-Party Risk Management Challenges

Third-party service providers can help companies scale operations without the costly overhead, but not without inherent risks.

Why Existing Compliance Programs Won’t Always Protect You from IT Risk

Don’t rely on a check-the-box strategy to mitigate threats and vulnerabilities. Bolster existing compliance programs.

Why IT Compliance Isn’t Enough to Keep Your Organization Safe

Meeting regulatory compliance requirements is a must for many organizations, however, it’s often not enough to identify all technology risks within an organization. Organizations may not have identified threats and vulnerabilities to critical assets. Due to the impacts of COVID-19, those risks have expanded beyond the physical confines of a business. Now, it’s even more important for organizations to assess IT risks within their environments.