Join EY's GRC Tech team and contribute to IT Risk and Assurance engagements and Transformation projects. You'll build strong relationships, identify business opportunities, and proactively manage engagement risks. This role is a fantastic opportunity to be part of a leading firm and contribute to the growth of a new service offering within EY GDS.

As a Senior GRC SAP Controls professional, you will engage with business stakeholders to thoroughly understand and document requirements. You'll analyze reports and assessments to ensure implemented solutions align with business needs. Developing a deep understanding of business operations and needs will be crucial for evaluating business models and processes.

This role involves performing comprehensive control testing for both ITAC and ITGC based on client specifications. You will work collaboratively as a team member, sharing responsibilities and maintaining open communication with senior team members regarding task progress. Additionally, you'll conduct research and support senior colleagues in preparing client presentations and information memorandums.

Lead SAP Risk and Controls projects, ensuring exceptional delivery and client satisfaction. Conduct SAP audits to verify system integrity and data accuracy. Design and rigorously assess SAP S4 controls, identifying potential gaps and proposing effective improvements. You will also become familiar with key business processes like Order To Cash, Procure To Pay, and Record To Report, leveraging this functional knowledge to strengthen control frameworks.

Collaborate effectively with cross-functional teams to integrate risk and control considerations into overarching project objectives. Provide insightful thought leadership on current SAP risk and control trends and industry best practices. You will develop and maintain robust working relationships with client and onsite personnel, ensuring strict adherence to project-specific quality protocols.

A minimum of 4-8 years of experience in SAP IT Audit, coupled with a strong understanding of IT governance practices, is required. You should have successfully completed 2-3 Risk & Control engagements that include pre- and post-implementation reviews, assessments, and control design and testing for SAP ECC and/or S4 HANA landscapes.

A good grasp of the COSO framework, Sarbanes-Oxley Act (Sections 302 and 404), and GDPR is essential. Proven experience in performing test of design and effectiveness for internal controls related to SOD, ITAC, ITDM, ICFR, and IFRS, along with the ability to recommend best practices, is also key. Strong understanding of SAP ECC & S4 HANA environments, excellent project management and leadership skills, and the ability to articulate complex ideas clearly are expected.

Relevant professional certifications such as CISA, CRISC, or CIA are desirable. Exposure to SAP Basis testing and SAP ITGC testing is preferred. Candidates with professional consulting experience in technology risk management, particularly from a Big 4 or similar large consulting firm, will be highly regarded. Excellent written and verbal communication skills are necessary, as is the ability to conduct and lead workshops with client stakeholders to understand their processes and system landscapes.