SAP Auditor

Exp-7-12

Location-Remote

We are seeking a highly skilled CISA-certified SAP Auditor to conduct IT and application control audits across SAP environments. The consultant will assess SAP security controls,

user access management, Segregation of Duties (SoD), change management, and compliance with internal and external regulatory requirements.

Responsibilities

∙Conduct ITGC and application control audits within SAP environments.

∙Review SAP security architecture, roles, profiles, and authorization concepts.

∙Assess user provisioning, de-provisioning, and access management controls.

∙Evaluate Segregation of Duties (SoD) risks and mitigating controls.

∙Review change management, transport management, and SAP basis controls.

∙Document audit findings, risks, and remediation recommendations.





∙Work with business and technical stakeholders to validate compliance requirements.

∙Support internal, external, and regulatory audits.

Qualifications

Required Skills & Experience:

∙Active CISA certification.

∙7+ years of IT Audit experience, including SAP audits.

∙Robust understanding of SAP ECC, S/4HANA, GRC, and SAP security concepts.

∙Experience with ITGC, SOX, ISO 27001, SOC, or similar compliance frameworks.

∙Strong risk assessment and audit documentation skills.

∙Excellent stakeholder communication skills.

Preferred Qualifications

∙SAP Security or SAP GRC experience.

∙CIA, CRISC, CISSP, or equivalent certifications.

∙Experience in manufacturing, utilities, telecom, or large enterprise environments.

📌 SAP Auditor (India)
🏢 Vysystems
📍 India