Senior Manager-ITGC Internal Audit

DAMAC Properties; Delhi; On-site; INR 1,500,000 - 2,000,000; Full time

Job summary

DAMAC Shared Services in Noida, India is seeking a Manager/Senior Manager - ITGC to lead design, testing and reporting of IT General Controls in support of SOX/ICFR compliance. You will own ITGC scope across applications, infrastructure and IT processes including access, change, operations and program development, collaborating with IT, Applications and Security teams.

Responsibilities include planning walkthroughs, testing, evidence collection, remediation tracking, and acting as a liaison with

Qualifications

• CISA preferred; CISSP, CIA or equivalent certification is advantageous.
• Bachelor's degree in Information Technology, Computer Science, Accounting or a related field.
• Manager: 8–12 years, Senior Manager: 10–14 years of relevant experience in IT audit, ITGC or IT risk & controls, including SOX-specific experience gained with a Big 4 firm and/or a large corporate internal audit function.
• Hands-on experience reviewing security and access controls within major ERP environments (SAP and/or Oracle) is required.

Responsibilities

• Define and maintain the annual ITGC scope, including in-scope applications, supporting infrastructure, interfaces and IT processes relevant to financial reporting.
• Plan and execute ITGC walkthroughs and testing across the four core domains: Access Management, Change Management, Computer Operations (including backups and batch processing), and Program Development/Acquisition.
• Assess automated/application controls, system-generated reports (Information Produced by Entity – IPE) and interface controls for completeness and accuracy.
• Coordinate with IT Infrastructure, Applications and Information Security teams to obtain evidence, system configurations and access listings required for testing.
• Identify control gaps and deficiencies, assess root cause and severity, and work with IT process owners to define and agree practical remediation plans.
• Track remediation progress and perform re-testing of remediated controls ahead of quarterly/annual certification.
• Act as the day-to-day point of contact for External/Statutory Auditors on ITGC-related queries and evidence requests.
• Prepare periodic ITGC status reports and dashboards for the VP – SOX and Finance Audits, highlighting key risks and open items.
• Support the assessment and onboarding of new systems, ERP modules or infrastructure changes (including M&A integrations) into the SOX/ITGC scope.
• Review and mentor the work of ITGC team members, graduate/associate auditors and co-source resources.
• Contribute to the continuous improvement of ITGC testing methodology, templates and use of automation/analytics.

Skills

IT audit

SOX/ICFR

Stakeholder management

Report writing

Analytical skills

Education

Bachelor's degree in Information Technology/Computer Science/Accounting or related field

Tools

SAP

Oracle

Job description

Manager/Senior Manager - ITGC (IT General Controls)

DAMAC Shared Services, Noida, India The Manager/Senior Manager – ITGC leads the design, testing and reporting of IT General Controls in support of the Group's SOX / ICFR compliance programme. The role owns the ITGC scope across in-scope applications, infrastructure and IT processes - covering access management, change management, computer operations and program development and works closely with IT, Applications and Security teams to ensure controls are appropriately designed, evidenced and operating effectively.

Key Responsibilities

• Define and maintain the annual ITGC scope, including in-scope applications, supporting infrastructure, interfaces and IT processes relevant to financial reporting.
• Plan and execute ITGC walkthroughs and testing across the four core domains: Access Management, Change Management, Computer Operations (including backups and batch processing), and Program Development/Acquisition.
• Assess automated/application controls, system-generated reports (Information Produced by Entity – IPE) and interface controls for completeness and accuracy.
• Coordinate with IT Infrastructure, Applications and Information Security teams to obtain evidence, system configurations and access listings required for testing.
• Identify control gaps and deficiencies, assess root cause and severity, and work with IT process owners to define and agree practical remediation plans.
• Track remediation progress and perform re-testing of remediated controls ahead of quarterly/annual certification.
• Act as the day-to-day point of contact for External/Statutory Auditors on ITGC-related queries and evidence requests.
• Prepare periodic ITGC status reports and dashboards for the VP – SOX and Finance Audits, highlighting key risks and open items.
• Support the assessment and onboarding of new systems, ERP modules or infrastructure changes (including M&A integrations) into the SOX/ITGC scope.
• Review and mentor the work of ITGC team members, graduate/associate auditors and co-source resources.
• Contribute to the continuous improvement of ITGC testing methodology, templates and use of automation/analytics.

Qualifications & Experience

• Certified Information Systems Auditor (CISA) preferred; CISSP, CIA or equivalent certification is an advantage.
• Bachelor's degree in Information Technology, Computer Science, Accounting or a related field.
• Manager: 8–12 years, Senior Manager: 10–14 years of relevant experience in IT audit, ITGC or IT risk & controls, including SOX-specific experience gained with a Big 4 firm and/or a large corporate internal audit function.
• Hands-on experience reviewing security and access controls within major ERP environments (SAP and/or Oracle) is required.

Knowledge, Skills & Competencies

• Strong working knowledge of ITGC frameworks and leading practices (COBIT, ISO 27001) as applied to a SOX/ICFR context.
• Solid understanding of ERP security models (SAP GRC / Oracle Cloud Security), database and operating-system level controls, and cloud infrastructure controls.
• Ability to translate technical IT findings into business risk language for financial and non-technical stakeholders.
• Strong analytical and report-writing skills, with attention to detail and evidence-based conclusions.
• Good stakeholder management and communication skills across IT, Finance and external audit teams.