Audit Manager - Systems Audit & Access Governance

Ramraj Cotton

8-14 Years

Tiruppur, India

Posted 4 hours ago
Be among the first 10 applicants

Job Description

Role Snapshot

Role Title

Audit Manager - Systems Audit & Access Governance

Department

System and Process Audit

Location

Tirupur, Tamil Nadu (on-site; travel within group companies as required)

Team

Build and lead a team of 2–4 audit analysts

Experience

8–14 years in IT / Systems Audit or ERP Access Governance

Qualifications

CA Intermediate / MBA (Finance or IT) / CPA / ACCA

Certifications

CISA preferred — CISSP / CIA / CRISC advantageous

Industry

Manufacturing / Textiles / Retail — Multi-ERP, multi-application environment

Role Purpose

Single owner of user access governance, controls assurance, process audit, and continuous systems improvement across the entire application landscape. Hands-on and board-facing — equally comfortable extracting raw ERP data and presenting risk findings. We want someone dynamic and raring to make a measurable difference, not a passive reviewer.

Key Responsibilities

01 User Access Review

Reconcile all ERP/app accounts against live HR records; disable leavers and dormant users; establish JML process; maintain User Access Register with quarterly owner-certification cycles.

02 Segregation of Duties

Build role-to-function matrices; apply SoD rule library to identify conflicts (e.g. create-vendor/approve-payment); prioritise by risk; track remediation in a living Risk Register.

03 Least Privilege

Compare assigned permissions vs actual usage; produce Entitlement Heat Map; drive rationalisation programmes; establish bi-annual re-certification for all privileged accounts.

04 Access Control Vulnerabilities

Assess authentication, MFA coverage, PAM controls, API/middleware gaps, and logging adequacy; produce prioritised Vulnerability Register with risk ratings and mitigations.

05 Management Reporting & Follow-Up

Prepare risk-rated audit reports; maintain CAP tracker; conduct monthly follow-up reviews; escalate overdue critical actions; produce Quarterly Governance Dashboard for the board.

06 Process Controls Review

Walkthrough P2P, O2C, R2R, H2R and Inventory cycles; identify control gaps and single points of failure; recommend preventive/detective controls; re-audit remediated areas.

07 Redundancy & Productivity

Identify duplicate functions, unused modules, and manual re-keying steps; quantify effort cost; prepare rationalisation business cases with productivity impact projections.

08 AI & Advanced Analytics

Deploy AI anomaly detection; run SQL/Python/ACL population-level tests; automate reconciliations via RPA; design Continuous Monitoring Framework with real-time risk dashboards.

09 Analytical Reporting & Abnormality Detection

Prepare data-driven reports with Benford's Law, duplicate-payment, and three-way match tests; profile user behaviour anomalies; produce consolidated Master Exception Reports.

10 Master Data Governance

Review Vendor, Customer, Item, CoA and Employee masters for duplicates and orphaned records; detect unauthorised changes; implement governance framework with data stewards and cleanse cycles.

Education & Certifications