Oracle Fusion ITGC Analyst

SAS; Pune District; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

SAS is seeking an Oracle Fusion ITGC Analyst to support ITGC and SOX compliance across a global enterprise. You will serve as the subject matter expert for IT general controls, partner with stakeholders, and ensure audit readiness with documentation and evidence across CIS applications.

You will configure GRC tooling, coordinate access reviews, and oversee controls in development, changes, production migrations, and logging. Strong auditing experience and a bachelor’s degree are required.

Qualifications

• 4–6 years of IT audit, IT risk and compliance, SOX, ITGC, or related technology-control functions.
• Experience designing, operating, assessing, or auditing ITGCs across enterprise applications and supporting technologies.
• Strong knowledge of access management, privileged access, segregation of duties, and audit logging.
• Experience supporting SOX Section 404 compliance or audits of internal control over financial reporting.
• Experience coordinating with internal and external auditors and providing complete, reliable audit evidence.
• Bachelor’s degree in Accounting, Finance, Information Systems, Computer Science, Cybersecurity, Information Technology, or related field.
• Equivalent combinations of education, training, and certifications may be considered.

Responsibilities

• Serve as the CIS division-wide SME for ITGC, SOX, and PCAOB audit readiness.
• Develop and maintain ITGC policies, standards, and evidence requirements.
• Partner with owners and teams to embed compliance by design into systems and processes.
• Configure and administer GRC tools for access reviews and risk analysis.
• Coordinate periodic access reviews and monitor privileged and joiner/mover/leaver controls.
• Oversee controls for SDLC, change management, production migrations, interfaces, and audit logging.
• Conduct ITGC risk assessments, control walkthroughs, and remediation evaluations.
• Identify control gaps and coordinate sustainable remediation of deficiencies.
• Act as CIS liaison with auditors for walkthroughs, questionnaires, evidence, and testing.
• Maintain audit-ready documentation: narratives, matrices, evidence, and SOC reports.
• Review third-party assurance reports and coordinate responses to exceptions.

Skills

IT audit

SOX compliance

ITGC

Access governance

Change management

Risk assessment

Audit coordination

Education

Bachelor's degree (Accounting/Finance/Info Systems)

Tools

Fastpath GRC

Oracle Fusion Cloud ERP

Oracle EPM Cloud

Workday

Microsoft Azure

Job description

Oracle Fusion ITGC Analyst

Support Oracle Fusion Financials and ITGC processes in a global enterprise environment

Primary Responsibilities

• Serve as the CIS division-wide subject matter expert for IT General Controls, SOX compliance, technology controls, and PCAOB audit readiness.
• Develop and maintain consistent ITGC policies, standards, control procedures, documentation, and evidence requirements across in-scope CIS applications and technologies.
• Partner with application owners, administrators, developers, infrastructure teams, Finance, Internal Audit, and other stakeholders to incorporate compliance by design into systems, integrations, changes, and operational processes.
• Configure and administer Fastpath GRC for User Access Reviews, segregation-of-duties monitoring, access-risk analysis, mitigating controls, audit-log reviews, and compliance reporting.
• Coordinate periodic access reviews and monitor privileged access, service accounts, segregation-of-duties conflicts, and joiner, mover, and leaver controls.
• Oversee controls for system development, change management, configuration changes, production migrations, computer operations, interfaces, batch processing, and audit logging.
• Conduct ITGC risk assessments, control walkthroughs, self-assessments, compliance reviews, and evaluations of control design and operating effectiveness.
• Identify control gaps, perform root-cause analysis, and coordinate sustainable remediation of deficiencies and recurring exceptions.
• Act as the primary CIS liaison with internal and external auditors for ITGC walkthroughs, questionnaires, evidence requests, testing, findings, and remediation.
• Maintain an audit-ready documentation library, including control narratives, risk and control matrices, access reviews, change evidence, test results, SOC reports, bridge letters, and remediation records.
• Review third-party assurance reports and coordinate responses to exceptions, complementary user-entity controls, and other service-provider risks.
• Develop and deliver division-wide training, job aids, and guidance on SOX, ITGC, access governance, change controls, audit evidence, and control-owner responsibilities.
• Provide CIS leadership with reporting on audit readiness, control execution, deficiencies, remediation progress, and emerging compliance risks.
• Stay current on SOX Section 404, PCAOB, COSO, COBIT, ITGC, identity governance, cloud controls, and public-company compliance requirements.

Requirement

• Typically requires 4–6 years of experience in IT audit, IT risk and compliance, SOX, ITGC, application controls, financial systems, or a related technology-control function.
• Demonstrated experience designing, operating, assessing, or auditing ITGCs across enterprise applications and supporting technologies.
• Strong knowledge of access management, privileged access, segregation of duties, change management, system development, computer operations, interfaces, configuration management, and audit logging.
• Experience supporting SOX Section 404 compliance or audits of internal control over financial reporting.
• Experience conducting risk assessments, control walkthroughs, self-assessments, control testing, deficiency evaluations, and remediation validation.
• Experience coordinating with internal and external auditors and preparing complete, reliable, and timely audit evidence.
• Experience developing policies, procedures, control narratives, risk and control matrices, testing documentation, and audit workpapers.
• Familiarity with GRC, identity-governance, access-certification, audit-management, or compliance-monitoring applications.
• Understanding of SOC reports, bridge letters, complementary user-entity controls, and third-party assurance requirements.
• Strong analytical, project-management, communication, and stakeholder-influencing skills.
• Ability to work independently and coordinate compliance activities across global, cross-functional teams.
• Bachelor’s degree in Accounting, Finance, Information Systems, Computer Science, Cybersecurity, Information Technology, or a related field.
• Equivalent combinations of education, training, professional certifications, and relevant experience may be considered.
• You’re curious, passionate, authentic, and accountable. These are our values and influence everything we do.

Mandatory Technical Skills

• CISA, CIA, CPA, CRISC, CISM, CISSP, CGEIT, or a comparable audit, risk, security, or compliance certification.
• Experience supporting PCAOB-regulated audits in a public company or public-company-readiness environment.
• Experience in IT audit, technology risk, or controls advisory with a major accounting or professional-services firm.
• Hands-on experience administering Fastpath GRC or a similar enterprise GRC platform.
• Experience with Oracle Fusion Cloud ERP, Oracle EPM Cloud, Workday, Boomi, Microsoft Azure, Active Directory, databases, data warehouses, or other enterprise technologies.
• Experience with identity governance, role-based access, privileged-access management, service accounts, and joiner, mover, and leaver controls.
• Experience evaluating automated controls, system-generated reports, interfaces, data integrity, and information produced by the entity.
• Working knowledge of SQL, reporting tools, data analytics, or continuous-control monitoring.
• Experience supporting multinational technology environments, shared services, subsidiary audits, or geographically distributed teams.
• Demonstrated ability to train and guide technical and nontechnical stakeholders on SOX and ITGC responsibilities.
• Strong customer-service orientation with the ability to challenge ineffective practices and elevate unresolved compliance risks.