Role & responsibilities

- Perform and support IT General Controls (ITGC) testing across key domains including Access Management, Change Management, and IT Operations for SOX, internal audits, and regulatory compliance requirements.

- Execute IT Application Controls (ITAC) testing within SAP, Oracle, and other enterprise applications, including automated controls, configuration controls, interface controls, and key reports testing.

- Coordinate with internal auditors, external auditors, control owners, and business stakeholders throughout the audit lifecycle, including planning, walkthroughs, testing discussions, evidence collection, and issue resolution.

- Review, validate, and maintain audit evidence to ensure completeness, accuracy, and compliance with audit requirements prior to submission to auditors.

- Lead and monitor User Access Review (UAR) activities, ensuring timely completion by control owners and remediation of segregation of duties (SoD), inappropriate access, and other identified issues.

- Conduct periodic reviews of normal, standard, and emergency changes to assess compliance with established Change Management policies and identify deviations or control exceptions.

- Analyze and evaluate SOC 1 and SOC 2 reports,



assess complementary user entity controls (CUECs), and determine their impact on the organization's control environment and audit requirements.

- Assess IT policies, standards, and procedures to identify control gaps, compliance risks, process inefficiencies, and opportunities for control optimization and process improvement.

- Document audit observations, risk assessments, control deficiencies, and recommendations; track remediation plans to ensure timely closure of audit findings and compliance issues.

- Support enterprise-wide IT risk assessments, compliance monitoring, and control effectiveness evaluations, while facilitating walkthroughs and stakeholder discussions to strengthen the overall IT governance and control framework.

Preferred candidate profile

- Solid experience in ITGC Testing, ITAC Testing, SOX Compliance, SAP Security Controls, Oracle Controls Testing, User Access Reviews, and Change Management Reviews.

- Familiarity with SOC 1/SOC 2, COBIT, NIST, ISO 27001, and audit methodologies.

- Excellent stakeholder management, audit coordination, documentation, and communication skills.

📌 IT Audit & Compliance - Consultant / AM (Bengaluru)
🏢 INNOVATIVE
📍 Bengaluru