We are seeking an experienced ITGC Auditor with strong expertise in IT General Controls (ITGC), SOX compliance, ERP audits, and IT risk management. The ideal candidate will have experience performing IT audits, evaluating automated controls, testing ERP environments, and providing IT risk advisory services.
Key Requirements:
6+ years of experience in IT Audit, IT Risk, Internal Audit, or Risk Advisory.
Strong knowledge of ITGCs, SOX, ICFR, application controls, and IT risk frameworks.
Experience with audit frameworks such as COBIT, ITIL, and ISO 27001/27002.Hands-on experience auditing ERP systems such as SAP, Oracle, Microsoft Dynamics, Infor, Epicor, Lawson, or JDE.Ability to evaluate automated/configuration controls and document testing workpapers.
Experience performing SOC 1, SOC 2, SSAE 18, CSAE 3416, IT internal audits, and IT controls testing.
Experience providing advisory services in IT risk, governance, cybersecurity, privacy, and system implementations.
Knowledge of SAP Security, Segregation of Duties (SoD), role design, and access management.
Strong communication and stakeholder management skills.
Preferred Qualifications:
SAP ECC 6.0 Security implementation, support, and role design experience.
Experience designing standardized SAP Business and Basis roles.
Certifications such as CISA, CIA, CRISC, CISSP, SAP Security/GRC, or ISO 27001.Master's degree in Information Systems, Computer Science, Business, or related field preferred.
