Senior Manager – IT Risk, Audit & Compliance (ITGC/SOX/ERP Controls)

RGP; India; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

A consulting firm is seeking a highly experienced Senior IT Risk & Assurance Consultant in India. The ideal candidate will have over 12 years of experience in SOX 404 / ICOFR, IT general controls, cybersecurity, and risk advisory services. You will lead complex global engagements, manage compliance programs, and collaborate with senior stakeholders across various industries. Essential qualifications include a Bachelor's degree in Commerce, Accounting, or IT, and professional certifications such as CISA. A competitive package and opportunities for growth are offered.

Qualifications

• 12+ years of progressive experience in ERP Security & Controls.
• Hands-on experience with multiple ERP platforms.
• Proven ability to lead and deliver engagements across multiple industries.

Responsibilities

• Lead and deliver ITGC, ITAC, SOX 404/ICOFR audit and compliance programs.
• Conduct assessments of IT governance frameworks, cybersecurity controls, and data privacy compliance.
• Manage end-to-end engagement delivery, including planning, execution, and reporting.

Skills

SOX 404 / ICOFR Assessments

IT General Controls

ERP Security & Controls

Cybersecurity

Data Privacy

Risk Advisory services

Communication skills

Education

Bachelor’s degree in Commerce, Accounting, IT, or related field

MBA

Tools

SAP

Oracle

PeopleSoft

JD Edwards

Navision

GRC/SoD analysis

Job description

RGP is seeking a highly experienced Senior IT Risk & Assurance Consultant with a strong background in SOX 404 / ICOFR Assessments, IT General Controls, ERP Security & Controls, Cybersecurity, Data Privacy, and Risk Advisory services. This role requires a leader who can manage complex global assurance engagements, drive compliance programs, and partner with senior stakeholders across Fortune Global 500 and multinational environments.

What You Will Work On

• Lead and deliver ITGC, ITAC, SOX 404/ICOFR audit and compliance programs across global, regulated enterprises.
• Conduct assessments of IT governance frameworks, cybersecurity controls, data privacy compliance, and emerging technology risks.
• Review and assess SAP, Oracle, PeopleSoft, JD Edwards, Navision and other ERP security configurations including GRC/SoD analysis.
• Manage and execute risk assessments, walkthroughs, RCMs, and issue remediation strategies.
• Support IT policies, cybersecurity frameworks, SOP development, vulnerability assessments, and data migration audits.
• Serve as a trusted advisor to senior stakeholders, internal audit teams, business process owners, and IT leadership.
• Manage end-to-end engagement delivery, including planning, execution, reporting, client relationship management and team oversight.

What You Bring

• Bachelor’s degree in Commerce, Accounting, IT, or related field; MBA preferred.
• Professional Certifications Required: CISA
• Additional Certifications Preferred: CDPSE, CMA, SAP Power User
• Minimum 12+ years of progressive experience in:
• ERP Security & Controls
• ITGC, ITAC, Cybersecurity, and Compliance reviews
• Third-party assurance (SSAE16/SOC1/SOC2)
• Hands-on experience with multiple ERP platforms, including:
• Strong communication skills with experience engaging global stakeholders, regulators, and executive sponsors.
• Proven ability to lead and deliver engagements across multiple industries including BFSI, Manufacturing, Telecom, and Technology.

Preferred Experience

• Exposure to Data Privacy frameworks (GDPR or equivalent).
• Hands-on execution of vulnerability assessments and cybersecurity audits.
• Project delivery experience with global firms or Big 4 consulting background.