Senior SAP Controls Consultant

EY; Bengaluru; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

EY Bengaluru is seeking a seasoned SAP IT Audit specialist to join the GRC Tech team. You will lead IT governance engagements, assess SAP risk and controls, and guide client projects with senior team members. Your role includes building relationships with stakeholders and identifying opportunities within engagements.

The position focuses on SAP ECC/S4 HANA environments, ITGC/ITAC testing, and delivering high-quality audit outcomes while contributing to the growth of EY's GRC service offering.

Qualifications

• 4–8 years of SAP IT Audit experience.
• Lead SAP Risk and Controls projects with quality delivery.
• Experience with SAP ECC and/or S4 HANA.
• Perform SAP audits focusing on system integrity.
• Familiar with SAP risk, controls, and ITGC testing.

Responsibilities

• Interact with business stakeholders to gather and analyse requirements.
• Analyse reports to ensure solutions meet business needs.
• Perform control testing for ITAC and ITGC per scope.
• Collaborate with cross-functional teams on risk considerations.
• Prepare client presentations and information memorandums.

Skills

IT Audit

SAP Risk & Controls

COSO framework

SOX compliance

Stakeholder engagement

Communication skills

Tools

SAP ECC

S/4HANA

MS Office

Job description

Job Summary

As part of our EY GRC Tech team youll contribute technically to IT Risk and Assurance client engagements and as part of Transformation projects. An important part of your role will be to actively establish, maintain and strengthen internal and external relationships. Youll also identify potential business opportunities for Ernst & Young within existing engagements and escape these as appropriate. Similarly, youll anticipate and identify risks within engagements and share any issues with senior members of the team.

The opportunity

Were looking for people to join the group of our EY GDS GRC Tech Team. This is a fantastic opportunity to be part of a leading firm whilst being instrumental in the growth of a new service offering.

Career Framework

• Interacts with business stakeholders to gather, understand, document, and analyse business requirements.


• Analyse reports and assessments to provide insights on whether a solution/technology being implemented is meeting business requirements.


• Evaluates business models, processes, and operations to develop a good understanding of business needs and requirements.


• Perform control testing for both ITAC & ITGC as per the client scope and requirement.


• Work effectively as a team member, share responsibility, provide support, maintain communication and update senior team members on progress of tasks.


• Conduct research and assist senior team members in preparing client presentations and information memorandums.


• Continuously strive towards exceeding client & team expectations and work on increasingly complex assignments


• Develop and maintain productive working relationships with client/onsite personnel.


• Ensuring adherence to quality protocols specified for the project

Experience, Background, Technical Skills & Knowledge

• Candidate will have minimum 4-8 years of experience in SAP IT Audit with knowledge of IT governance practices.


• Lead SAP Risk and Controls projects, ensuring high-quality delivery and client satisfaction.


• Should have completed at least 2-3 Risk & Control engagements covering pre-& post implementation reviews, assessments, control design and testing for SAP ECC and/or S4 HANA landscape.


• Perform SAP audits, focusing on system integrity and data accuracy.


• Design and assess SAP S4 controls, identifying gaps and recommending improvements.


• Familiarity with key business process such as Order To Cash, Procure To Pay, and Record To Report and utilize functional knowledge of key business processes to enhance control frameworks.


• Collaborate with cross-functional teams to integrate risk and control considerations into broader project objectives.


• Provide thought leadership and insights on SAP risk and control trends and best practices.

Qualifications

• Good understanding of the COSO framework, Sarbanes-Oxley Act (Sections 302 and 404), GDPR etc


• Strong experience in performing test of design and effectiveness for internal controls related to SOD, ITAC, ITDM, ICFR and IFRS along with the ability to suggest best practice recommendations.


• Proven experience in SAP Risk and Controls projects.


• Strong understanding of SAP ECC & S4 HANA environments.


• Excellent project management and leadership skills.


• Ability to communicate complex ideas effectively, both verbally and in writing.


• Relevant professional certifications (e.g., CISA, CRISC, CIA) are desirable.


• Good to have exposure in SAP Basis testing & SAP ITGC testing will be preferable


• Candidate with professional consulting experience in technology risk management ideally with a Big 4 or similar large consulting firm will be preferred.

Skills & Capabilities

• Need to possess good written and verbal communication skills


• Should possess the ability to conduct and drive workshops with the client stakeholders on understanding clients process & system landscape


• Work effectively as a team member and drive the delivery of IT audit documents independently


• Demonstrate sound technical understanding of IT Audits (ITGC & ITACs) for SAP environment.


• Knowledge of the COSO framework, Sarbanes-Oxley Act (Sections 302 and 404) etc


• Inculcate positive learning attitude and the zeal to upskill as well as cross-skill.


• Understand and follow workplace policies and procedures.


• Participating in the organization-wide people initiatives


• Maintain an educational program to continuously upskill.


• Foster teamwork, quality culture and lead by example while training and mentoring juniors


• Inculcate positive learning culture and support learning agenda for self and team

Technologies & Tools

• SAP Functional Knowledge


• Knowledge on Business Processes


• SAP ECC & S4 HANA


• MS Office Tools

Ideally, youll also have

• Brief knowledge of analytical tools and software to support data analysis and visualization engagements


• Brief understanding of tools like Power BI, Blue Prism or UI Path, SAC dashboarding etc., as well as RPA transformation approach