Job Description:

The role provides independent and objective assurance and advisory support to enhance organizational effectiveness and risk mitigation. The role evaluates the reliability and effectiveness of risk management, governance, and internal control processes across financial, operational, strategic, information technology, compliance, and investigation audits. The position tests and evaluates financial records, transactions, processes, and systems for SOX compliance with applicable laws, policies, and agreements. The role works collaboratively with internal compliance functions and external auditors to identify gaps, anticipate risks, and strengthen controls. The role reports audit findings, risks, and actionable recommendations to management to support informed decision-making and continuous improvement.

Essential Functions:

- Sarbanes Oxley (SOX) Control Design and Testing (~60 70%):
- Perform all aspects of the Companys SOX-404 compliance program for IT including maintining the risk and controls matrix, providing control training, performing control walkthroughs and testing IT controls throughout the year and closely aligning with the external auditors. Areas of focus include:
- RCM: Working with IT management and the external auditors, proactively maintain and update RCM for all IT controls,



ensuring that Company has appropriate and properly defined controls to address risks and ensuring that the RCM is updated for process and system changes and to address changes in risks.
- IT General Controls (ITGCs): Test the Companys controls around logical access, change management, and computer operations for all in-scope IT systems and related infrastructure.
- SoD: Ensure the Company has effective controls to identify and address segregation of duties (SoD) conflicts and periodically test the operating effectiveness of the SoD controls
- RCM: Working with IT management and the external auditors, proactively maintain and update RCM for all IT controls, ensuring that Company has appropriate and properly definced controls to address risks and ensuring that the RCM is updated for process and system changes and to address changes in risks.
- SOC Reports: Identify and review SOC reports for key thirs parties relied upon for the key controls to evaluate the reports opion, Completementary User Entity Controls (CUECs), Completementary Subservice Organixation Controls (CSOC), Defieciencies, and possible gaps between the control desgin and operating effectivness of the Business and the Service Organization. Test the effectiveness of the SOC reviews performed by the business owners.

📌 Internal Audit (Ahmedabad)
🏢 Amneal Pharmaceuticals
📍 Ahmedabad