IT Audit & Compliance - Consultant / AM

Innovative; Mumbai, Gurugram District, Bengaluru; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Innovative in Mumbai seeks a seasoned IT Controls Specialist to perform ITGC and ITAC testing across SAP, Oracle, and other enterprise apps. You will coordinate with auditors and control owners through the audit lifecycle, review evidence, and lead UAR activities to ensure timely remediation of issues.

The role focuses on assessing control gaps, compliance with change management, and strengthening the IT governance framework in a regulated environment.

Qualifications

• Experience in ITGC testing across key domains like Access Management, Change Management and IT Operations.
• Ability to conduct ITAC testing in SAP, Oracle and other enterprise applications.

Responsibilities

• Perform and support IT General Controls testing for SOX, internal audits and regulatory compliance.
• Execute IT Application Controls testing within SAP, Oracle and other enterprise apps, including automated controls and key reports testing.
• Coordinate with internal and external auditors, control owners and stakeholders throughout the audit lifecycle.
• Review, validate and maintain audit evidence for completeness and compliance before submission.
• Lead and monitor User Access Review activities, ensuring timely completion and remediation of SoD issues.
• Conduct periodic reviews of changes to assess compliance with Change Management policies and identify deviations.
• Analyze SOC 1 and SOC 2 reports and assess related controls and their impact on audits.
• Assess IT policies and procedures to identify control gaps and opportunities for improvement.
• Document observations, risk assessments and remediation plans; track closure of audit findings.
• Support enterprise-wide IT risk assessments and compliance monitoring.

Skills

ITGC Testing

ITAC Testing

SOX Compliance

SAP Security Controls

Oracle Controls Testing

User Access Reviews

Change Management Reviews

Tools

SAP

Oracle

Job description

Role & responsibilities

• Perform and support IT General Controls (ITGC) testing across key domains including Access Management, Change Management, and IT Operations for SOX, internal audits, and regulatory compliance requirements.


• Execute IT Application Controls (ITAC) testing within SAP, Oracle, and other enterprise applications, including automated controls, configuration controls, interface controls, and key reports testing.


• Coordinate with internal auditors, external auditors, control owners, and business stakeholders throughout the audit lifecycle, including planning, walkthroughs, testing discussions, evidence collection, and issue resolution.


• Review, validate, and maintain audit evidence to ensure completeness, accuracy, and compliance with audit requirements prior to submission to auditors.


• Lead and monitor User Access Review (UAR) activities, ensuring timely completion by control owners and remediation of segregation of duties (SoD), inappropriate access, and other identified issues.


• Conduct periodic reviews of normal, standard, and emergency changes to assess compliance with established Change Management policies and identify deviations or control exceptions.


• Analyze and evaluate SOC 1 and SOC 2 reports, assess complementary user entity controls (CUECs), and determine their impact on the organization's control environment and audit requirements.


• Assess IT policies, standards, and procedures to identify control gaps, compliance risks, process inefficiencies, and opportunities for control optimization and process improvement.


• Document audit observations, risk assessments, control deficiencies, and recommendations; track remediation plans to ensure timely closure of audit findings and compliance issues.


• Support enterprise-wide IT risk assessments, compliance monitoring, and control effectiveness evaluations, while facilitating walkthroughs and stakeholder discussions to strengthen the overall IT governance and control framework.

Preferred candidate profile

• Strong experience in ITGC Testing, ITAC Testing, SOX Compliance, SAP Security Controls, Oracle Controls Testing, User Access Reviews, and Change Management Reviews.


• Familiarity with SOC 1/SOC 2, COBIT, NIST, ISO 27001, and audit methodologies.


• Excellent stakeholder management, audit coordination, documentation, and communication skills.