GDS Assurance - Technology Risk (NFS) - Senior Associate - APAC Global

Hammerjack Pty Ltd; Taguig; On-site; PHP 1,500,000 - 2,200,000; Full time

Job summary

Hammerjack Pty Ltd seeks a Senior role in EY Technology Risk focused on IT Risk and Assurance. You will engage in identifying business opportunities while mitigating risks and preparing audit reports for clients.

We require experience in testing SAP controls and at least 3 years in a relevant field. Preferred certifications include CISA and SAP S/4HANA modules, emphasizing a strong understanding of SAP security and business controls.

Qualifications

• At least 3 years of experience.
• Certification in SAP S/4HANA or SAP ECC functional modules is preferred.
• CISA certification is preferred.

Responsibilities

• Participate in IT Risk and Assurance engagements.
• Identify and test SAP IT security and risk controls across the enterprise.
• Prepare audit reports for clients.

Skills

Experience reviewing and testing SAP S/4HANA or SAP ECC ITGC

Knowledge of SAP S/4HANA or SAP ECC user access security architecture

Experience performing walkthrough with clients

Education

B.E./B.Tech (CS/IT) or MBA, CA

Tools

SAP GRC

SAP S/4HANA

Job description

Job Description

At EY, you will build a career that is tailored to your unique skills and experiences. This role is part of the EY Technology Risk team and focuses on IT Risk and Assurance engagements, identifying business opportunities, and mitigating risks.

Position

EY‑Technology Risk – Senior

Key Responsibilities

• Participate in IT Risk and Assurance engagements.
• Work effectively as a team member, sharing responsibility, providing support, maintaining active communication, and updating senior team members on progress.
• Assist in the preparation of audit reports that will be delivered to clients and other parties.
• Develop and maintain productive working relationships with onshore and client personnel.
• Identify and test SAP IT security and IT risk controls across the enterprise.
• Assist with facilitating practice‑wide training (SAP ITGC, SAP ITAC, SAP Pre & Post Implementation) curriculum.
• Work closely with onshore, cross‑functional teams and act as project senior across the organization.
• Stay updated with and promote awareness of updated ERP versions and their functionalities, as well as industry best practices.
• Execute project management and stakeholder management tasks for clients, assurance teams, and onshore staff.
• Plan and prepare budgets, and analyze budget versus actuals.
• Provide quality deliverables with value addition on engagements, recognized as SMR across the organization.

Skills and Attributes for Success

• Experience reviewing and testing SAP S/4HANA or SAP ECC IT general controls (ITGC) for access management, change management, computer operations, and SDLC.
• Experience reviewing and testing SAP S/4HANA or SAP ECC security & configurations such as debugging and client settings.
• Experience performing pre‑ and post‑implementation reviews in SAP S/4HANA or SAP ECC environments, including migration testing.
• Knowledge of the TCode and tables used to extract data from SAP S/4HANA or SAP ECC for ITGC and ITAC testing.
• Knowledge of SAP S/4HANA or SAP ECC user access security architecture (roles, profiles, authorisation objects).
• Experience testing firefighter controls in SAP S/4HANA or SAP ECC and GRC.
• Experience reviewing and testing OS and HANA Database controls in SAP S/4HANA or SAP ECC environments.
• Experience working with other SAP applications such as GRC, Fiori, BW, BI, Ariba, Concur, SuccessFactors, VIM, Vistex.
• Experience evaluating and testing sensitive access and segregation of duties across key business and IT processes in SAP S/4HANA or SAP ECC and GRC environments.
• Experience with SAP GRC access control (AC) and process control (PC), financial compliance management (FCM).
• Experience performing walkthrough (test of design) directly with the client, operating effectiveness analysis, and knowledge of financial statement assertions.
• Knowledge of auditing methodology and interpretation of ABAP code for ITGC and ITAC control testing.
• Experience reviewing and testing key reports to ensure risks (completeness & accuracy) related to information produced by entity (IPE) are addressed.
• Knowledge of industry‑specific SAP S/4HANA or SAP ECC modules and standard functionalities related to business and IT controls.
• Strong knowledge of SAP S/4HANA or SAP ECC configurations such as 3‑way match and copy controls.
• Experience testing interface controls between multiple systems and middleware controls.
• Experience in IT audit within the context of financial audit, regulations, standards, and guidelines.
• Knowledge of control frameworks such as COSO, internal control principles, SOX, J‑SOX.
• Knowledge of common IT governance, control, and assurance industry frameworks (COBIT, ISACA best practices).
• Knowledge of third‑party attestation standards (SSAE 16/18) and other reporting and industry‑specific standards.

Qualifications

• B.E./B.Tech (CS/IT) or MBA, CA with at least 3 years of experience.
• Certification in SAP S/4HANA or SAP ECC functional modules, ABAP, or Security (preferred).
• CISA certification (preferred).
• ISO 27001:2013 certification (preferred).
• Any other relevant certification (preferred).