Identity and Access Management for SOX

We are seeking a Identity and Access Management for SOX to join our team!

Must Have Technical

· SAP User Administration – Provisioning & Deprovisioning

· SAP Role Management

· Generic ID (GID) Ownership & User Administration

· SOX IT General Controls & Access Recertification

· Audit Evidence Collection & Control Documentation

· Risk & Control Matrix (RCM) Management

· Periodic Access Reviews – Bi-Monthly & Annual

· Microsoft Excel – Advanced Level (Control & Evidence Tracking)

· Ticketing Systems – JIRA, GRC, ServiceNow (SNOW)

Functional Skills

· Strong understanding of SOX compliance requirements and IT General Control frameworks

· Demonstrated experience supporting internal controls and audit readiness activities in a regulated

enterprise environment

· Ability to make sound, risk-based access decisions independently and under time-sensitive compliance obligations · Effective cross-functional collaboration with application owners, business supervisors, executive administrators, and compliance stakeholders · Clear and professional stakeholder communication and reporting across all levels of the organization · Proven commitment to policy enforcement and governance alignment throughout the access lifecycle · Exceptional attention to detail with a compliance-first mindset and ability to manage high-volume, time-critical deliverables · Experience supporting audit remediation activities including tracking and driving corrective actions to resolution

Roles & Responsibilities

· Administer end-to-end user access for SAP systems, SOX-scoped applications, and Generic IDs

(GIDs) across databases and enterprise applications, ensuring adherence to least-privilege and

need-to-know principles

· Perform user access modifications and deprovisioning in strict accordance with internal controls,

approval workflows, and established access management policies

· Conduct periodic access recertifications for SOX-scoped applications, including bi-monthly and

annual access review campaigns, ensuring timely and accurate completion within compliance

deadlines

· Coordinate with supervisors, executive administrators, and application owners to validate the

necessity and appropriateness of user access, driving informed and risk-based access decisions

· Ensure compliance with Segregation of Duties (SoD) requirements and proactively identify,

escalate, and mitigate access-related risks in alignment with the Risk & Control Matrix (RCM)

· Prepare, organize, and maintain comprehensive audit evidence and control documentation to

support internal and external audit readiness activities

· Support audit remediation efforts by tracking corrective actions to closure, ensuring timely

resolution of identified control gaps and findings

· Process and manage access-related requests through enterprise ticketing platforms including

JIRA, SAP GRC, and ServiceNow (SNOW)

· Enforce access governance policies and ensure alignment with SOX compliance frameworks and

organizational control standards

· Provide stakeholder communication and reporting on access review status, compliance posture,

open findings, and remediation progress

Key Words to search in Resume

SOX, SOX Recertification, SOX compliance