The Senior IT Pillar Specialist – Applications Controls and Compliance is a hands-on compliance professional supporting the organization's SOX compliance program, ISO certification, IT audits and maintaining an effective IT control setting.
This role works hand in hand with IT, cybersecurity, finance, business process owners, Internal Audit, and external auditors to document controls, perform walkthroughs, validate evidence, execute control testing, support audits, and suggest process improvements. The position requires strong communication skills, attention to detail, analytical capabilities, and the ability to build productive working relationships across technical and non-technical teams.
The successful candidate will help ensure IT controls are consistently executed, properly documented, supported by appropriate evidence, and maintained in a manner that supports external audit requirements and overall audit readiness.
Maintain and continuously improve SOX IT General Controls (ITGCs), IT Application Controls (ITACs), and IT-Dependent Manual Controls (ITDMs) supporting financial reporting
Develop and maintain audit-ready documentation including narratives, process flows, risk and control matrices (RACMs), control procedures, evidence requirements, and testing support materials for Business Applications
Definition and implementation Segregation of Duties (SoD)
IT-Dependent Manual Controls (ITDMs)
Assess completeness and accuracy of reports, system-generated data, and evidence used to support key controls
Support annual SOX testing, management assessments, and external audit activities
Conduct interviews and walkthroughs with, business stakeholdersPerform testing of controls, evaluate supporting evidence, document results, and communicate findings
Analyze large data sets with the use of AI tools to support audits, control testing, and risk assessments
Perform user access reviews, role analysis, segregation of duties assessments, exception analysis, sampling,



reconciliations, and trend analysis
Validate system populations and report completeness and accuracy used for SOX testing
Identify anomalies, outliers, control failures, and compliance concerns through data analysis
Partner with IT and business stakeholders to improve control processes, documentation quality, and audit readiness
Participate in reviews of third-party assurance reports (SOC reports) and technology risk assessments as assigned
Build working relationships with IT, cybersecurity, finance, Internal Audit, external auditors, and control owners
Translate technical risks, control issues, and audit findings into clear business language
8+ years of direct-full-time experience in IT audit, SOX compliance, IT controls, cybersecurity governance, internal controls or Technology compliance programs

- Bachelor's degree in Information Systems/ IT/ Cybersecurity/ Computer Science or a related field
- Experience Pathway: Equivalent direct, full-time, hands-on experience specialized in SOX and IT audits in lieu of a degree
- Demonstrated experience performing 5 of the following:
- ITGC testing
- ITAC testing
- ITDM testing
- Risk assessments
- Internal Control over Financial Reporting (ICFR)

IT General Controls
ERP and Financial Reporting Systems
Cybersecurity Controls

Advanced Microsoft Excel skills including pivot tables, reconciliations, data analysis, exception reporting, and audit sampling or experience using AI tools
CISA and ITIL certification are preferred
Experience supporting SOX readiness, IPO readiness, or public-company compliance programs
Experience with large-scale ERP environments
Experience with ServiceNow, AuditBoard, Oracle Fusion ERP, JDE , Azure, Saviynt, or similar enterprise platforms
Experience working within engineering, construction, energy, EPC, manufacturing, or industrial environments
Experience supporting global technology organizations across multiple geographic regions and third-party service providers
US visa would be a good to have
#

📌 Senior ICT Technician - Full Time (Gurugram)
🏢 McDermott International
📍 Gurugram