Join EY's Risk Consulting team as a Manager specializing in SAP IT Controls Review. This role offers a unique opportunity to lead SAP control assessments across the MENA region, delivering audit and control review services. You'll play a key part in establishing and nurturing client relationships, identifying business opportunities, and proactively managing engagement risks. We are seeking experienced professionals to drive the growth of our Digital Risk service offering and contribute to building a better working world.

Manage and lead teams on SAP control review projects, ensuring high-quality deliverables and adherence to timelines. Provide guidance on SAP-related queries and industry standards. Develop proposals and lead pursuit efforts for SAP engagements. Collaborate with onshore teams to meet expectations and identify skill-based opportunities. Conduct ITAC and ITGC control testing according to client scope. Contribute to practice-wide training initiatives in SAP ITGC/ITAC and implementation reviews. Foster strong relationships with cross-functional teams and onshore counterparts. Stay abreast of ERP updates, functionalities, and best practices. Execute project and stakeholder management, delivering value-added insights and acting as a trusted advisor.

A minimum of 8-12 years of experience in SAP IT Audit, coupled with a strong understanding of IT governance practices, is essential. Proven experience in 5-6 Risk & Control engagements, including pre- & post-implementation reviews, control design, and testing for SAP ECC and/or S4 HANA landscapes is required. Proficiency in performing SAP audits, assessing SAP S4 controls, and identifying gaps is crucial. Familiarity with key business processes like Order To Cash, Procure To Pay, and Record To Report is expected. Experience in reviewing and testing IT general controls (ITGC) for domains such as access, change management, and SDLC, as well as security configurations and user access architecture, is necessary. Knowledge of T-codes, tables, and testing sensitive access/SOD across SAP environments is vital. Experience with OS and database controls, other SAP applications (GRC, Fiori, BW, etc.), firefighter controls, and GRC access control is advantageous. The ability to interpret ABAP codes for control testing and review key business process configurations is also required. Familiarity with COBIT and ISACA best practices is expected.