SAP SOD Senior Consultant/Manager

Protiviti India; Gurugram District, Bengaluru, Mumbai; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Protiviti India is seeking professionals with strong expertise in SAP Functional Controls or SAP Security & GRC to lead controls testing and risk assessments. The role focuses on ITAC/ITGC testing, SAP process controls, and audit-related activities across SAP ECC and S/4HANA environments.

Candidates will perform audits, RACM design reviews, and implementation assessments, engaging with stakeholders to drive risk reduction and process improvements.

Qualifications

• Experience in testing IT Application Controls (ITAC) and IT General Controls (ITGC).
• Knowledge of SAP core processes including OTC, PTP, RTR and control frameworks in ECC and S/4HANA.
• Experience in risk and controls assessments covering access, security, and automated controls.
• Hands-on SAP audits and implementation reviews, including ToD/ToE and stakeholder discussions.

Responsibilities

• Hands-on SAP audit experience across implementations and reviews.
• Perform process walkthroughs, ToD, ToE, business impact analysis, observation drafting and stakeholder discussions.

Skills

Controls Testing Expertise

SAP Business Process Knowledge

Risk Assessment

Audit & Review Experience

Job description

Mandatory Technical & Functional Skills:

• Controls Testing Expertise: Experience in testing IT Application Controls (ITAC), IT General Controls (ITGC), and key reports (IPE)
• SAP Business Process Knowledge: Strong understanding of core SAP business processes including Order-to-Cash (OTC), Procure-to-Pay (PTP), and Record-to-Report (RTR), along with knowledge of control frameworks, Sensitive Access (SA), and Segregation of Duties (SoD) concepts across SAP ECC and SAP S/4HANA
• Risk Assessment: Experience in performing risk and controls assessments covering application security, system access, business process controls, and automated controls
• Audit & Review Experience: Hands-on experience across SAP audits and implementation reviews, including process walkthroughs, Test of Design (ToD), Test of Operating Effectiveness (ToE), business impact analysis, observation drafting, and stakeholder discussions

Specialization: Candidates should demonstrate strong expertise in either SAP Functional Controls or SAP Security & GRC. Candidates with experience in both areas will be preferred.

Specialization - SAP Functional Controls

• Hands-on experience in SAP configuration reviews, audit trail assessments, process control design, and control optimization
• Experience in implementation assurance, RACM design, configuration risk assessments, and business process control reviews.
• Exposure to data migration reviews, master data controls, and post-implementation control assessments