Seeking an experienced ITGC Auditor specializing in SAP GRC to bolster our Sustainability & Emerging Assurance team in Hyderabad. This role focuses on supporting SOX compliance and IT audit engagements. The ideal candidate brings substantial experience in SAP ERP (ECC/S/4HANA) and SAP GRC, with a proven track record in SAP security, IT General Controls (ITGC), Segregation of Duties (SoD), and SAP change management. Familiarity with internal/external audits and regulatory compliance frameworks is crucial.

Key responsibilities include conducting SOX ITGC testing for SAP ERP systems, covering user access, change management, and IT operations. You will evaluate SAP security protocols, SAP GRC Access Control functionalities, SoD conflicts, and provisioning processes. This involves performing walkthroughs, control testing, reviewing evidence, and documenting audit findings. The role also requires assessing SAP transport management, emergency changes, and access governance. Collaboration with business units, SAP Basis, Security teams, and Internal Audit is essential for supporting audit engagements and remediation efforts. Delivering high-quality audit workpapers and reports, along with effectively communicating findings, is also a core part of the role.

This position requires 4–6 years of dedicated experience in SAP IT Audit, SOX ITGC, SAP Security, and SAP GRC. A strong command of SAP ECC/S/4HANA, SAP GRC Access Control (ARA, ARM, EAM), and Segregation of Duties (SoD) is necessary. Candidates should possess experience with SOX 404 compliance, ITGC testing, and standard audit methodologies, complemented by a solid understanding of COBIT, ITIL, and various risk & control frameworks. Excellent analytical, communication, and stakeholder management skills are paramount for success. A Bachelor's degree in Computer Science, Information Technology, Information Systems, or a closely related field is required. Preferred certifications include SAP Certified Associate (SAP Security, SAP S/4HANA, or SAP GRC) or CISA, CISM, CRISC, or equivalent.