IT Audit & Compliance_ITGC & ITAC

We are looking for an experienced IT Audit & Compliance Analyst / Senior Analyst with strong experience in IT General Controls (ITGC), IT Application Controls (ITAC), SOX Compliance, SAP/Oracle Controls, User Access Reviews and Change Management.

The role will support IT audits, compliance activities, control testing, risk assessments and control effectiveness evaluations across enterprise IT environments.

Key Responsibilities

• Perform and support IT General Controls (ITGC) testing across key domains including:

• Access Management

• Change Management

• IT Operations

• Execute IT Application Controls (ITAC) testing within SAP, Oracle and other enterprise applications.

• Test automated controls, configuration controls, interface controls and key reports.

• Coordinate with Internal Auditors, External Auditors, Control Owners and Business Stakeholders throughout the audit lifecycle.

• Support audit planning, walkthroughs, testing discussions, evidence collection and issue resolution.

• Review, validate and maintain audit evidence to ensure completeness and accuracy before submission to auditors.

• Lead and monitor User Access Review (UAR) activities.

• Identify and support remediation of Segregation of Duties (SoD) conflicts, inappropriate access and other access-related issues.

• Conduct periodic reviews of normal, standard and emergency changes to assess compliance with Change Management policies.

• Analyze and evaluate SOC 1 and SOC 2 reports.

• Assess Complementary User Entity Controls (CUECs) and determine their impact on the organization's control environment.

• Review IT policies, standards and procedures to identify control gaps, compliance risks and process inefficiencies.

• Document audit observations, risk assessments, control deficiencies and recommendations.

• Track remediation plans and ensure timely closure of audit findings and compliance issues.

• Support enterprise-wide IT Risk Assessments, compliance monitoring and control effectiveness evaluations.

• Facilitate walkthroughs and stakeholder discussions to strengthen the overall IT governance and control framework.

Required / Preferred Skills

• Strong experience in ITGC Testing.
• Strong experience in ITAC Testing.
• Experience in SOX Compliance.
• Experience with SAP Security Controls.
• Experience with Oracle Controls Testing.
• Experience in User Access Reviews (UAR).
• Strong understanding of Segregation of Duties (SoD).
• Experience in Change Management Reviews.
• Knowledge of SOC 1 and SOC 2 reports.
• Understanding of Complementary User Entity Controls (CUECs).
• Familiarity with COBIT, NIST and ISO 27001.
• Knowledge of IT audit methodologies.
• Strong stakeholder management, audit coordination, documentation and communication skills.