SAP IT Audit & Controls Manager, you will lead technology risk engagements and implementation support for enterprise clients undergoing digital transformation. You are responsible for designing, testing, and remediating SAP General Controls, managing project delivery, and reviewing complex audit workpapers to ensure strict SOX/regulatory compliance.
Key Responsibilitie
s1. SAP Consulting & Remediation Suppor
- tControl Design: Design and assess internal controls across SAP ECC and S/4HANA environments
- .Gap Analysis: Identify control deficiencies and architect remediation plans to bridge gaps
- .Segregation of Duties (SoD): Perform analysis on SoD risks, emergency access, and role design within SAP GRC/Security
.2. SAP ITGC Testing & ITAC Executio
- nWalkthroughs & Testing: Lead walkthroughs and perform testing of design (ToD) and operating effectiveness (ToE) for ITGCs, including Change Management, Logical Security, and IT Operations
- .Automated Controls: Test IT Application Controls (ITACs) by evaluating automated system configurations, interfaces, and system reports
- .Framework Alignment: Ensure client systems comply with regulatory and control frameworks such as Sarbanes-Oxley (SOX), GDPR, COSO, and COBIT
.3. Workpapers Review & Team Leadershi
- pWorkpaper Review: Review detailed testing workpapers prepared by junior consultants, ensuring they meet Big 4 documentation standards, internal methodologies, and evidence requirements
- .Team Mentorship: Supervise, mentor, and coach engagement teams. Address staffing issues and provide ongoing technical training
- .Stakeholder Communication: Act as the primary liaison between internal audit teams, client management, and implementation partners. Present findings, risk impacts, and actionable recommendations to C-level executives
.
Qualifications & Requirement
- s:
Education: Bachelor's degree in Information Technology, Computer Science, Finance, or a related fie - ld.Certifications: Professional certification such as CISA (Certified Information Systems Auditor) or CRISC (Certified in Risk and Information Systems Control) is highly preferr
- ed.Experience: Minimum 8 - 12 years of relevant experience in SAP IT Audit, Technology Risk Management, or GRC consulting, with a significant tenure at a Big 4 or equivalent global consulting fi
- rm.Technical Acumen: Deep understanding of SAP ECC and S/4HANA architectures. Hands-on experience with SAP Solution Manager, GRC, and key SAP tables/transaction cod
es.
