Job Description
Inviting applications for the role of Manager, IT SOX!
In this role, you will be responsible for delivering ITSOx & Internal Audit solution pertaining to SAP ERP. Demonstrate IT operational risk knowledge/ experience including design of effective control processes, development of test requirements and/or testing controls for effectiveness.
Responsibilities
Create high quality process and control design documentation such as PFDs
Review and update Risk Control Matrix (RCM) for the application system
Evaluate SAP Internal Controls (ITGC and ITAC etc.) as per various compliance standards and frameworks such as SOx, COSO, CoBIT 5 etc.
Independently execute IT SOX and IT Advisory audit assignments
Lead client discussions on a day-to-day basis for walkthrough, status updates, etc.
Report potential controls gaps, suggest remediations/ actions plans, assist in risk exposure
Review and document SOC reports
Ensure client service delivery in accordance with the quality guidelines & methodologies
Build and maintain client relationship by understanding and being responsive to client needs and ensuring high quality of work
Contribute in people and knowledge development initiatives by developing training material and conducting training
Qualifications we seek in you!
Minimum Qualifications
Good understanding of SAP ERP and HANA Database (ECC and S/4 HANA)
In depth knowledge/experience of technology processes, systems and infrastructure including project management, change management, access management and data processing operations such as job scheduling and monitoring, problem management and backups
Knowledge of Business Process Cycles (e.g., Order to Cash, Procure to Pay, Record to Receipt etc.)
Good understanding of industry frameworks such as NIST, ISO27001, COBIT
Excellent interpersonal skills with the ability/desire to work in a team-based, customer-focused environment
Demonstrate strong analytical thinking and interpersonal skills including the ability to research and understand sophisticated processes and effectively communicate them to interested parties
Demonstrate superior relationship building and relationship leadership skills
Experience in evaluating complex business and technology risks, internal controls which mitigate risks, and related opportunities for internal control environment
Ability to manage and motivate a team of professionals
Relevant certifications such as CISA/CISSP/CISM etc.