Salesforce ITGC Compliance Auditor

Job Title: Salesforce ITGC Compliance Auditor

Company: Quanta Systems Technologies LLP

Employment Type: Full Time

Location: Onsite (New Jersey) 3 days a week to work from Client office at Bridgewater

Key Responsibilities :

We are seeking a highly experienced Salesforce ITGC Compliance Auditor with a strong technical foundation across Salesforce Commerce Cloud (SFCC) , Salesforce Marketing Cloud (SFMC) , and Salesforce Order Management (OMS) . This role sits at the intersection of IT audit, risk management, and hands-on Salesforce platform knowledge — ideal for a professional who can not only design and execute IT General Controls (ITGC) testing but also speak fluently to the underlying technical architecture of the Salesforce ecosystem being audited.

The ideal candidate will bring deep expertise in SOX/ITGC frameworks, access and change management controls, and system configuration reviews, combined with practical, technical familiarity with how Commerce Cloud, Marketing Cloud, and Order Management operate, integrate, and are governed.

Key Responsibilities

ITGC & Compliance

• Plan, design, and execute IT General Controls (ITGC) testing across Salesforce platforms in accordance with SOX, internal audit, and enterprise risk frameworks.
• Assess and test controls related to access management, change management, program development, and IT operations (ITOC) within SFCC, SFMC, and Order Management environments.
• Evaluate user access provisioning, de-provisioning, role-based access control (RBAC), segregation of duties (SoD), and privileged access within Salesforce orgs.
• Review change management processes for platform releases, configuration changes, and custom code deployments (Apex, integrations, workflows).
• Identify control gaps, deficiencies, and risks; document findings with clear root-cause analysis and remediation recommendations.
• Partner with internal and external auditors (Big 4 / statutory auditors) during audit cycles, walkthroughs, and control testing.
• Maintain audit documentation, control matrices, RCMs (Risk Control Matrices), and testing workpapers in line with audit standards.

Technical & Platform Expertise

• Apply hands-on understanding of Salesforce Commerce Cloud architecture (storefronts, cartridges, integrations, order flows) to assess technical and business process risks.
• Leverage working knowledge of Salesforce Marketing Cloud (Journey Builder, Automation Studio, Contact Builder, data extensions) to evaluate data governance and access controls.
• Understand Salesforce Order Management processes (order lifecycle, fulfillment, payments, returns) to assess transactional and financial control points.
• Review integration points between Salesforce clouds and upstream/downstream systems (ERP, payment gateways, third-party platforms) for control coverage.
• Assess data security, encryption, and platform configuration settings relevant to compliance and audit requirements.

Stakeholder & Process Management

• Act as a bridge between IT, business, and audit teams — translating technical Salesforce configurations into audit-ready language.
• Present audit findings and control assessments to senior stakeholders, IT leadership, and audit committees.
• Drive remediation tracking and follow-up testing to ensure timely closure of identified issues.
• Contribute to continuous improvement of ITGC frameworks, testing methodologies, and audit efficiency (including automation opportunities).

Required Qualifications

• 12+ years of overall experience in IT Audit, ITGC/SOX compliance, or IT Risk & Controls, of which:
• 6+ years in ITGC / SOX compliance and IT Risk & Controls (access management, change management, ITOC testing, audit methodology).
• 6+ years in a technical, hands-on capacity with Salesforce platforms.
• Strong, demonstrable technical background in Salesforce Commerce Cloud, Salesforce Marketing Cloud, and Salesforce Order Management .
• Solid understanding of SOX 404, COSO framework, COBIT , and IT General Controls testing methodologies.
• Proven experience in access management, change management, and IT operations control testing.
• Experience working with internal/external auditors and managing audit lifecycles end-to-end.
• Strong documentation skills — RCMs, control narratives, workpapers, and audit reports.
• Excellent stakeholder management and communication skills, with the ability to explain technical risk in business terms.
• Bachelor's degree in Information Systems, Computer Science, Accounting, Finance, or related field.

Preferred Qualifications

• Professional certifications such as CISA, CISSP, CRISC , or equivalent.
• Salesforce certifications (e.g., Salesforce Administrator, Commerce Cloud Digital Developer, Marketing Cloud Administrator) are a strong plus.
• Prior experience in a Big 4 / consulting firm audit environment.
• Experience with GRC tools (e.g., AuditBoard, ServiceNow GRC, Archer).
• Familiarity with data privacy regulations (GDPR, CCPA) as they apply to Marketing Cloud data handling.

#UrgentHiring #Salesforce #SalesforceCommerceCloud #SFCC #SalesforceMarketingCloud #SFMC #SalesforceOMS #ITAudit #ITGC #SOXCompliance #ITRisk #RiskManagement #SalesforceSecurity#OpenToWork #QuantaSystemsTechnologies

Company’s Website : https://www.quantumintegrators.com/

Company’s LinkedIn Profile : https://www.linkedin.com/company/quantum-integrators-group-llc/

📩 DM me or share your resume at [ [email protected] .]

#Immediate_Hiring