Oracle Fusion ITGC Analyst

Mployee.me; Pune District; On-site; INR 1,500,000 - 3,200,000; Full time

Job summary

Mployee.me is seeking an ITGC/SOX professional to support Oracle Fusion Financials and global ITGC processes. You will act as the CIS liaison with auditors, develop policies, and oversee controls across enterprise applications and infrastructure.

The role requires 4–6 years of IT audit experience, strong knowledge of SOX, ITGC, and policy development, and hands-on experience with Fastpath GRC and Oracle ecosystems. India-based role with cross-functional collaboration.

Qualifications

• Bachelor’s degree in a related field is required or equivalent.
• 4–6 years of IT audit, IT risk and compliance experience.
• Hands-on with ITGC controls, SOX, and PCAOB audit readiness.
• Experience with GRC platforms and policy development.
• Knowledge of access governance, change controls, and data integrity.
• Strong analytical and stakeholder management abilities.

Responsibilities

• Serve as ITGC and SOX specialist for CIS division.
• Develop and maintain ITGC policies, standards, and evidence.
• Collaborate with owners and IT teams to embed compliance by design.
• Configure Fastpath GRC for access reviews and SDLD controls.
• Coordinate access reviews, joiner/mover/leaver processes, and privileged access controls.
• Oversee controls for SDLC, change management, production migrations, and audit logs.
• Conduct risk assessments, control walkthroughs, self-assessments, and remediation tracking.
• Serve as primary liaison with auditors for ITGC walkthroughs and evidence requests.
• Maintain audit-ready documentation: narratives, matrices, evidence, and reports.
• Review third-party assurance reports and coordinate responses to exceptions.
• Develop division-wide training on SOX, ITGC, and access governance.

Skills

Analytical skills

Project management

Communication

Stakeholder influence

Independent work

Audit governance

Education

Bachelor’s degree in Accounting / Finance / Information Systems

Equivalent combinations of education, training or certifications

Tools

Fastpath GRC

Oracle Fusion Cloud ERP

Oracle EPM Cloud

Workday

Boomi

Microsoft Azure

Active Directory

Job description

Support Oracle Fusion Financials and ITGC processes in a global enterprise environment

Primary Responsibilities

• Serve as the CIS division-wide subject matter expert for IT General Controls, SOX compliance, technology controls, and PCAOB audit readiness.
• Develop and maintain consistent ITGC policies, standards, control procedures, documentation, and evidence requirements across in-scope CIS applications and technologies.
• Partner with application owners, administrators, developers, infrastructure teams, Finance, Internal Audit, and other stakeholders to incorporate compliance by design into systems, integrations, changes, and operational processes.
• Configure and administer Fastpath GRC for User Access Reviews, segregation-of-duties monitoring, access-risk analysis, mitigating controls, audit-log reviews, and compliance reporting.
• Coordinate periodic access reviews and monitor privileged access, service accounts, segregation-of-duties conflicts, and joiner, mover, and leaver controls.
• Oversee controls for system development, change management, configuration changes, production migrations, computer operations, interfaces, batch processing, and audit logging.
• Conduct ITGC risk assessments, control walkthroughs, self-assessments, compliance reviews, and evaluations of control design and operating effectiveness.
• Identify control gaps, perform root-cause analysis, and coordinate sustainable remediation of deficiencies and recurring exceptions.
• Act as the primary CIS liaison with internal and external auditors for ITGC walkthroughs, questionnaires, evidence requests, testing, findings, and remediation.
• Maintain an audit-ready documentation library, including control narratives, risk and control matrices, access reviews, change evidence, test results, SOC reports, bridge letters, and remediation records.
• Review third-party assurance reports and coordinate responses to exceptions, complementary user-entity controls, and other service-provider risks.
• Develop and deliver division-wide training, job aids, and guidance on SOX, ITGC, access governance, change controls, audit evidence, and control-owner responsibilities.
• Provide CIS leadership with reporting on audit readiness, control execution, deficiencies, remediation progress, and emerging compliance risks.
• Stay current on SOX Section 404, PCAOB, COSO, COBIT, ITGC, identity governance, cloud controls, and public-company compliance requirements.

Requirement

• Typically requires 4–6 years of experience in IT audit, IT risk and compliance, SOX, ITGC, application controls, financial systems, or a related technology-control function.
• Demonstrated experience designing, operating, assessing, or auditing ITGCs across enterprise applications and supporting technologies.
• Strong knowledge of access management, privileged access, segregation of duties, change management, system development, computer operations, interfaces, configuration management, and audit logging.
• Experience supporting SOX Section 404 compliance or audits of internal control over financial reporting.
• Experience conducting risk assessments, control walkthroughs, self-assessments, control testing, deficiency evaluations, and remediation validation.
• Experience coordinating with internal and external auditors and preparing complete, reliable, and timely audit evidence.
• Experience developing policies, procedures, control narratives, risk and control matrices, testing documentation, and audit workpapers.
• Familiarity with GRC, identity-governance, access-certification, audit-management, or compliance-monitoring applications.
• Understanding of SOC reports, bridge letters, complementary user-entity controls, and third-party assurance requirements.
• Strong analytical, project-management, communication, and stakeholder‑influencing skills.
• Ability to work independently and coordinate compliance activities across global, cross-functional teams.
• Bachelor’s degree in Accounting, Finance, Information Systems, Computer Science, Cybersecurity, Information Technology, or a related field.
• Equivalent combinations of education, training, professional certifications, and relevant experience may be considered.
• You’re curious, passionate, authentic, and accountable. These are our values and influence everything we do.

Mandatory Technical Skills

• CISA, CIA, CPA, CRISC, CISM, CISSP, CGEIT, or a comparable audit, risk, security, or compliance certification.
• Experience supporting PCAOB-regulated audits in a public company or public-company-readiness environment.
• Experience in IT audit, technology risk, or controls advisory with a major accounting or professional‑services firm.
• Hands‑on experience administering Fastpath GRC or a similar enterprise GRC platform.
• Experience with Oracle Fusion Cloud ERP, Oracle EPM Cloud, Workday, Boomi, Microsoft Azure, Active Directory, databases, data warehouses, or other enterprise technologies.
• Experience with identity governance, role‑based access, privileged‑access management, service accounts, and joiner, mover, and leaver controls.
• Experience evaluating automated controls, system‑generated reports, interfaces, data integrity, and information produced by the entity.
• Working knowledge of SQL, reporting tools, data analytics, or continuous‑control monitoring.
• Experience supporting multinational technology environments, shared services, subsidiary audits, or geographically distributed teams.
• Demonstrated ability to train and guide technical and nontechnical stakeholders on SOX and ITGC responsibilities.
• Strong customer‑service orientation with the ability to challenge ineffective practices and elevate unresolved compliance risks.