Senior SAP Controls Consultant

EY; Pune District; On-site; INR 1,400,000 - 2,100,000; Full time

Job summary

EY GRC Tech team in India seeks a seasoned SAP IT Audit professional to contribute to IT risk and assurance client engagements and transformation projects. You will build relationships, identify opportunities within engagements, and highlight risks to senior team members.

The role involves leading SAP risk and controls engagements, performing tests of design and effectiveness for ITGC/ITAC, and collaborating with cross-functional teams to align risk considerations with project objectives.

Qualifications

• COSO framework and SOX (302 & 404) understanding required.
• Experience in SAP risk and controls projects.
• Tests of design and effectiveness for ITGC/ITAC in SAP environments.

Responsibilities

• Engage with business stakeholders to gather and analyze requirements.
• Evaluate processes and technology against business needs.
• Lead SAP risk and controls engagements with high-quality delivery.
• Perform control testing for ITGC and ITAC in SAP landscapes.
• Collaborate with cross-functional teams and communicate findings to senior members.

Skills

Communication skills

Workshop facilitation

Stakeholder management

Team collaboration

IT audit

SAP IT audit

Education

CISA certification

CRISC certification

CIA certification

Tools

SAP ECC & S/4 HANA

Power BI

UI Path / Blue Prism

Job description

Role Description

As part of our EY GRC Tech team youll contribute technically to IT Risk and Assurance client engagements and as part of Transformation projects. An important part of your role will be to actively establish, maintain and strengthen internal and external relationships. Youll also identify potential business opportunities for Ernst & Young within existing engagements and elevate these as appropriate. Similarly, youll anticipate and identify risks within engagements and share any issues with senior members of the team.

The Opportunity

We're looking for people to join the group of our EY GDS GRC Tech Team. This is a fantastic opportunity to be part of a leading firm whilst being instrumental in the growth of a new service offering.

Career Framework

• Interacts with business stakeholders to gather, understand, document, and analyse business requirements.
• Analyse reports and assessments to provide insights on whether a solution/technology being implemented is meeting business requirements.
• Evaluates business models, processes, and operations to develop a good understanding of business needs and requirements.
• Perform control testing for both ITAC & ITGC as per the client scope and requirement.
• Work effectively as a team member, share responsibility, provide support, maintain communication and update senior team members on progress of tasks.
• Conduct research and assist senior team members in preparing client presentations and information memorandums.
• Continuously strive towards exceeding client & team expectations and work on increasingly complex assignments
• Develop and maintain productive working relationships with client/onsite personnel.
• Ensuring adherence to quality protocols specified for the project

Experience, Background, Technical Skills & Knowledge

• Candidate will have minimum 4-8 years of experience in SAP IT Audit with knowledge of IT governance practices.
• Lead SAP Risk and Controls projects, ensuring high-quality delivery and client satisfaction.
• Should have completed at least 2-3 Risk & Control engagements covering pre-& post implementation reviews, assessments, control design and testing for SAP ECC and/or S4 HANA landscape.
• Perform SAP audits, focusing on system integrity and data accuracy.
• Design and assess SAP S4 controls, identifying gaps and recommending improvements.
• Familiarity with key business process such as Order To Cash, Procure To Pay, and Record To Report and utilize functional knowledge of key business processes to enhance control frameworks.
• Collaborate with cross-functional teams to integrate risk and control considerations into broader project objectives.
• Provide thought leadership and insights on SAP risk and control trends and best practices.

Qualifications

• Good understanding of the COSO framework, Sarbanes-Oxley Act (Sections 302 and 404), GDPR etc
• Strong experience in performing test of design and effectiveness for internal controls related to SOD, ITAC, ITDM, ICFR and IFRS along with the ability to suggest best practice recommendations.
• Proven experience in SAP Risk and Controls projects.
• Strong understanding of SAP ECC & S4 HANA environments.
• Excellent project management and leadership skills.
• Ability to communicate complex ideas effectively, both verbally and in writing.
• Relevant professional certifications (e.g., CISA, CRISC, CIA) are desirable.
• Good to have exposure in SAP Basis testing & SAP ITGC testing will be preferable
• Candidate with professional consulting experience in technology risk management ideally with a Big 4 or similar large consulting firm will be preferred.

Skills & Capabilities

• Need to possess good written and verbal communication skills
• Should possess the ability to conduct and drive workshops with the client stakeholders on understanding clients process & system landscape
• Work effectively as a team member and drive the delivery of IT audit documents independently
• Demonstrate sound technical understanding of IT Audits (ITGC & ITACs) for SAP environment.
• Knowledge of the COSO framework, Sarbanes-Oxley Act (Sections 302 and 404) etc
• Inculcate positive learning attitude and the zeal to upskill as well as cross-skill.
• Understand and follow workplace policies and procedures.
• Participating in the organization-wide people initiatives
• Maintain an educational program to continuously upskill.
• Foster teamwork, quality culture and lead by example while training and mentoring juniors
• Inculcate positive learning culture and support learning agenda for self and team

Technologies & Tools

• SAP Functional Knowledge
• Knowledge on Business Processes
• SAP ECC & S4 HANA
• MS Office Tools

Ideally, youll also have

• Brief knowledge of analytical tools and software to support data analysis and visualization engagements
• Brief understanding of tools like Power BI, Blue Prism or UI Path, SAC dashboarding etc., as well as RPA transformation approach