SOX ITGC Consultant

Snowrelic Inc; Bengaluru; Hybrid; INR 900,000 - 1,800,000; Full time

Job summary

Snowrelic Inc in Bengaluru (Hybrid: onsite 2–3 days a week) seeks a security/compliance professional to lead ITGC and ERP security testing for SOX 404. You will partner with process owners to ensure control compliance, work with auditors, and maintain documentation of ERP security controls and risk assessments.

Responsibilities include monitoring security threats, updating control frameworks, and embedding security into ERP implementations and system upgrades.

Qualifications

• Experience with ITGC testing and SOX compliance in ERP environments.
• Ability to coordinate with internal/external auditors and provide documentation.
• Experience maintaining ERP security controls documentation and risk assessments.

Responsibilities

• Lead and support testing of IT general controls (ITGCs) and automated controls for SOX 404 compliance.
• Coordinate with process owners to identify, remediate, and maintain SOX control compliance.
• Prepare and present security, risk, and compliance reports to senior management.

Skills

ITGC testing

SOX compliance

Audit coordination

ERP security

Policy development

Risk assessment

Job description

Start: 1st September

Location: Hybrid (Onsite 2-3 times per week in Bangalore office)

• Lead and support testing of IT General Controls (ITGCs) and Automated Controls for SOX Section 404 compliance.
• Partner with process owners to identify, remediate, and maintain SOX control compliance.
• Coordinate with internal and external auditors, providing documentation, evidence, and audit support.
• Maintain documentation for ERP security controls, risk assessments, compliance activities, and audit findings.
• Monitor emerging security threats, vulnerabilities, and regulatory changes, updating control frameworks as needed.
• Develop and enforce ERP security policies, standards, and procedures.
• Conduct risk assessments and implement security controls to protect ERP systems, applications, and data.
• Evaluate the effectiveness of security controls through regular assessments and recommend improvements.
• Collaborate with cross-functional teams to embed security into ERP implementations and system upgrades.
• Advise stakeholders on security best practices and compliance requirements.
• Support regulatory and external security audits to ensure compliance with applicable standards.
• Prepare and present security, risk, and compliance reports to senior management.