As an SAP IT Audit & Controls Manager, you will lead technology risk engagements and implementation support for enterprise clients undergoing digital transformation.
Location: Hyderabad
Experience: Minimum 8 - 12 years of relevant experience in SAP IT Audit, Technology Risk Management, or GRC consulting.
1. SAP Consulting & Remediation Support
- Control Design: Design and assess internal controls across SAP ECC and S/4HANA environments.
- Gap Analysis: Identify control deficiencies and architect remediation plans to bridge gaps.
- Segregation of Duties (SoD): Perform analysis on SoD risks, emergency access, and role design within SAP GRC/Security.
2. SAP ITGC Testing & ITAC Execution
- Walkthroughs & Testing: Lead walkthroughs and perform testing of design (ToD) and operating effectiveness (ToE) for ITGCs, including Change Management, Logical Security, and IT Operations.
- Automated Controls: Test IT Application Controls (ITACs) by evaluating automated system configurations, interfaces, and system reports.
- Framework Alignment: Ensure client systems comply with regulatory and control frameworks such as Sarbanes-Oxley (SOX), GDPR, COSO, and COBIT.
3. Workpapers Review & Team Leadership
- Workpaper Review: Review detailed testing workpapers prepared by junior consultants, ensuring they meet Big 4 documentation standards, internal methodologies, and evidence requirements.
- Team Mentorship: Supervise, mentor, and coach engagement teams. Address staffing issues and provide ongoing technical training.
- Stakeholder Communication: Act as the primary liaison between internal audit teams, client management, and implementation partners. Present findings, risk impacts, and actionable recommendations to C-level executives.
Qualifications & Requirements
- Education: Bachelor's degree in Information Technology, Computer Science, Finance, or a related field.
- Certifications: Professional certification such as CISA (Certified Information Systems Auditor) or CRISC (Certified in Risk and Information Systems Control) is highly preferred.
Technical Acumen: Deep understanding of SAP ECC and S/4HANA architectures. Hands-on experience with SAP Solution Manager, GRC, and key SAP tables/transaction codes.