I've spent over 12 years in IT SOX, from leading external audits at Deloitte to hands-on advisory work helping companies build and manage their own programs.
I've seen most IT SOX programs struggle for the same reason: no one truly owns them. Responsibility gets split across IT and finance, and the goal becomes satisfying auditors instead of building a program that works. I built Mekas Consulting to fix that.
No account managers, no layers of communication. You work with me directly from day one.
Not every finding needs the same level of attention, and not every control needs a redesign. I focus on what's actually worth fixing so you can get back to running your business.
When nobody internally truly owns your IT controls, things can get messy fast. I've seen this play out over and over. Controls pile up because an auditor once asked for them, no one understands why certain processes are in place, and before long the entire program becomes bloated and difficult to manage. Controls that should take 10 minutes end up eating your team's whole afternoon.
My goal is to help companies build control programs that actually work, without making them more complicated than they need to be. I kept seeing the same thing over and over: companies spending more time than they should on IT controls, and still not ending up with an effective program.
Having spent years both auditing IT controls and helping companies build them, I know what auditors actually need, and just as importantly, what they don't. When something comes up, I help teams fix the actual problem instead of adding more process to cover it.
Designing a good control isn't really the hard part. Getting people to actually follow it, quarter after quarter, year after year - that's the hard part. One of my favorite parts of this work is partnering with the people who actually own and operate these processes. Not just delivering recommendations, but sitting down with your team to figure out what works, and building something they can understand and maintain.
A lot of my job is helping clients separate what truly matters from what does not. I want clients spending less time worrying about IT controls and more time running their business.
Most people come to me at one of two points: eiter you're either building a controls program from scratch (usually after raising a round or preparing for an IPO), or you've got one already, but it's reactive, nobody really owns it, and every audit feels like starting over.
Wherever you're starting from, here's how we can work together:
I'll assess your control environment, tell you what's missing, and give you a clear, prioritized view of what actually matters. You'll walk away with:
One-time flat fee, tailored to your environment
Most companies don't need a full-time IT SOX Director. I step in as your program owner, setting direction and keeping things moving all year, without the cost of a full-time hire. Here's what that looks like:
Flat monthly retainer, scoped to your needs.
I founded Mekas Consulting to work more directly with the people and teams I can genuinely help, without the layers and red tape of a big firm.
I live around Atlanta with my wife and our three kids. Outside of work, I enjoy playing tennis, coaching baseball, being outdoors, and generally trying to keep up with our little ones.
Certified Information Systems Auditor (CISA)
Master of Science in Information Systems
Georgia State University