Role Snapshot /n Role Title /n Audit Manager - Systems Audit & Access Governance /n Department /n System and Process Audit /n Location /n Tirupur, Tamil Nadu (on-site; travel within group companies as required) /n Team /n Build and lead a team of 2–4 audit analysts /n Experience /n 8–14 years in IT / Systems Audit or ERP Access Governance /n Qualifications /n CA Intermediate / MBA (Finance or IT) / CPA / ACCA /n Certifications /n CISA preferred — CISSP / CIA / CRISC advantageous /n Industry /n Manufacturing / Textiles / Retail — Multi-ERP, multi-application environment /n Role Purpose /n Single owner of user access governance, controls assurance, process audit, and continuous systems improvement across the entire application landscape. Hands-on and board-facing — equally comfortable extracting raw ERP data and presenting risk findings. We want someone dynamic and raring to make a measurable difference, not a passive reviewer. /n Key Responsibilities /n 01 User Access Review /n Reconcile all ERP/app accounts against live HR records; disable leavers and dormant users; establish JML process; maintain User Access Register with quarterly owner-certification cycles. /n 02 Segregation of Duties /n Build role-to-function matrices; apply SoD rule library to identify conflicts (e.g. create-vendor/approve-payment); prioritise by risk; track remediation in a living Risk Register. /n 03 Least Privilege /n Compare assigned permissions vs actual usage; produce Entitlement Heat Map; drive rationalisation programmes; establish bi-annual re-certification for all privileged accounts. /n 04 Access Control Vulnerabilities /n Assess authentication, MFA coverage, PAM controls, API/middleware gaps,



and logging adequacy; produce prioritised Vulnerability Register with risk ratings and mitigations. /n 05 Management Reporting & Follow-Up /n Prepare risk-rated audit reports; maintain CAP tracker; conduct monthly follow-up reviews; escalate overdue critical actions; produce Quarterly Governance Dashboard for the board. /n 06 Process Controls Review /n Walkthrough P2P, O2C, R2R, H2R and Inventory cycles; identify control gaps and single points of failure; recommend preventive/detective controls; re-audit remediated areas. /n 07 Redundancy & Productivity /n Identify duplicate functions, unused modules, and manual re-keying steps; quantify effort cost; prepare rationalisation business cases with productivity impact projections. /n 08 AI & Advanced Analytics /n Deploy AI anomaly detection; run SQL/Python/ACL population-level tests; automate reconciliations via RPA; design Continuous Monitoring Framework with real-time risk dashboards. /n 09 Analytical Reporting & Abnormality Detection /n Prepare data-driven reports with Benford's Law, duplicate-payment, and three-way match tests; profile user behaviour anomalies; produce consolidated Master Exception Reports. /n 10 Master Data Governance /n Review Vendor, Customer, Item,



CoA and Employee masters for duplicates and orphaned records; detect unauthorised changes; implement governance framework with data stewards and cleanse cycles. /n Education &

Certifications /n /n

- CA Intermediate / MBA (Finance or IT) / CPA / ACCA

/n

- CISA strongly preferred

/n

- CIA / CISSP / CRISC / SAP GRC advantageous

/n

- A Degree/Diploma in CS or any IT field is a plus

/n /n Experience /n /n

- 8–14 years in IT/Systems Audit or ERP Access Governance

/n

- Hands-on with ≥ 2 years of: SAP, Oracle, MS Dynamics or equivalent

/n

- SoD analysis, access reviews, and least privilege in multi-system environments

/n

- Board-level audit reporting and CAP closure track record

/n

- Manufacturing / Textiles / FMCG background preferred

/n /n Technical Skills /n /n

- ERP user admin, role config, authorisation, and log extraction

/n

- SQL / Python / ACL / IDEA for population-level data testing

/n

- Power BI / Tableau for management dashboards

/n

- AI anomaly detection and LLM-assisted audit tools

/n

- RPA / scripting for audit automation

/n

- ISO 27001, COBIT, ITIL, SOX awareness

/n /n Behavioural /n /n

- Dynamic, action-oriented — finds problems and drives resolution

/n

- Translates technical findings into plain board-level language

/n

- Owns findings through to closure, not just the report

/n

- Resilient — comfortable raising uncomfortable truths

/n

- Hunger to learn and adopt current tools and techniques

/n /n Work Schedule: 6 Days Working (Monday – Saturday) /n Timings: 9:00 AM to 6:00 PM /n Mode: Work From Office (WFO) /n Interested candidates kindly share your updated resume to [email protected]

📌 Audit Manager - Systems Audit & Access Governance (Tiruppur)
🏢 Ramraj Cotton
📍 Tiruppur