IT Auditor (SAP RISE)

Job title: IT Auditor

Type: Remote:

Supporting Hours : 3-12 am IST

The IT Auditor (SAP RISE) will be responsible for assessing the design and effectiveness of IT controls in SAP RISE environments, ensuring compliance with internal policies, regulatory requirements, and industry frameworks. This specific role will be focused on the evaluation of technology general controls that will drive consistency and efficiency in all areas of technology development, integrations, support, and maintenance within SAP S/4HANA Cloud (RISE) and related systems.

RESPONSIBILITIES

• Support and participate in testing, documentation, and review of IT controls in SAP RISE landscape in support of SOX 404 and Internal Audits in coordination with Internal Audit, IT Compliance, and 3 rd party vendors/audit partners.
• Effectively document and communicate IT deficiencies and gaps. Help develop realistic remediation recommendations and timelines. Track and report on remediation to Internal Audit, IT, and business management.
• Partner with SAP S/4HANA Cloud (RISE) and related systems owners to identify gaps in their application relevant IT General Controls, automated business (application) controls.
• Actively report and provide updates and status on the progress of on-going projects and assessments.

• Support Internal Audit and IT Compliance with annual IT audit scoping, controls rationalization, and risk assessments.
• Partner with Internal Audit and IT Compliance to review compliance reports and certifications for 3 rd party service providers. Reports include but are not limited to SOC-1 (SSAE18) and SOC-2.
• Facilitate and lead walkthroughs with SAP RISE and related systems owners over IT general controls and other compliance assessments. This also may involve evaluating projects for potential impacts to GITCs

KEY QUALIFICATIONS

• Bachelor s degree in management information systems (MIS), computer science, accounting, or other with work experience preferred
• CISA, CISM, CIA or similar certification preferred
• Excellent attention to detail and organizational skills are needed to produce quality deliverables and manage deadlines
• Strong analytical and problem-solving ability. Must be able to collaborate with IT and business peers on breaking down complex problems into achievable solutions tailored for the business, either by process enhancements or through innovation technology.
• Ability to establish credibility with business and IT stakeholders
• Ability to self-define strategic objectives and execute project plan to deliver results within a rapidly growing organization
• Strong IT control competency, solid critical thinking skills and communication/influence skills are needed to drive this initiative
• Ability to analyze and document system processes

Experience

• SAP experience, especially in SAP RISE (SAP S/4HANA Cloud) and knowledge of related security practices are preferred.
• Cloud hosting controls (often tested via SOC reports if hosted by SAP)
• System configurations and role-based access control (RBAC)
• Change transports in SAP landscape
• At least 4 years experience in SAP landscape in designing, documenting, implementing, and testing IT control processes in a public company environment as it relates to risks and controls for SOX 404
• At least 4 years understanding of core IT processes (e.g., Change Management, System Development Lifecycle, Information Security, IT Operations etc.)
• Demonstrated skills in performing IT audits based on recognized internal control frameworks and governance including ITIL, COBIT, and COSO
• Knowledge and ability to audit a diverse IT environment with multiple operating systems and database platforms
• Demonstrated strong organizational and communication skills to provide tailored communication of status to stakeholders, management, and executives

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.