I currently work in IT Compliance / Audit department at my company that operates in the software engineering industry. The company is large and multi - national, with many thousands of employees.
My duties and departmental duties include the enforcement of internal control over IT, internal audits of IT processes, and minor security functions.
I am a junior member of the team. Given the nature of the work, our department is not always welcome/ politically palatable. During my short time here, I have already experience political push - back for a recently completed internal review with findings - inadequate documentation, deviations from change policy...etc). I am sensing tension / un willingness from management in remediating the deficiencies noted.
I would like to maintain a good relationship with peers and management alike without compromising our department's function, acting as an overseer that policies are followed / enforced. I try to be reasonable and rely on evidence when presenting findings, and avoid conflict. A set of norms seem to govern the culture rather than rigid policies.
How can I maintain a good working relationship when the work may be politically unpalatable?