SOX ITGC Consultant

iSystems Ltd; Islamabad; On-site; PKR 1,800,000 - 3,000,000; Full time

Job summary

Systems Limited seeks a SOX ITGC / IT Audit professional with 3–8 years of experience to execute IT General Controls testing, assess control effectiveness, support audits, and ensure compliance with SOX, ISO 27001, and SOC 2.

You will perform ITGC testing across Access Management, Change Management, IT Operations, and Logical Access; conduct walkthroughs, test sampling, evidence validation, and document findings while tracking remediation and closure in audit records and SAP GRC.

Qualifications

• 3–8 years total experience with 2–4 years in SOX ITGC testing, IT audit, or IT risk advisory.
• Strong hands-on experience in control testing, evidence review, and audit documentation.
• Good knowledge of SOX, ISO 27001, and SOC 2 frameworks.
• Experience with GRC platforms; SAP GRC preferred.
• Bachelor’s degree in IT, Computer Science, or related field.
• Preferred Certifications: CISA, CISM, ISO 27001 LA/LI, SOC 2, or SOX certifications.

Responsibilities

• Perform ITGC testing across Access Management, Change Management, IT Operations, and Logical Access.
• Conduct control walkthroughs, sample testing, and evidence validation.
• Identify control gaps, document findings, and support risk assessments and root cause analysis.
• Track remediation activities and validate closure of audit findings.
• Maintain audit-ready documentation and update GRC platforms, preferably SAP GRC.
• Prepare compliance reports and support internal and external audits.

Skills

SOX ITGC

IT audit

Risk advisory

Control testing

Evidence review

Education

Bachelor's degree in IT/CS

Tools

SAP GRC

Job description

We are looking for a SOX ITGC / IT Audit professional with 3–8 years of overall experience, including 2–4 years of hands‑on experience in SOX ITGC testing, IT audit, or IT risk advisory. The role will be responsible for executing IT General Controls testing, assessing control effectiveness, supporting audits, and ensuring compliance with SOX, ISO 27001, and SOC 2 requirements.

Responsibilities

• Perform ITGC testing across Access Management, Change Management, IT Operations, and Logical Access.
• Conduct control walkthroughs, sample testing, and evidence validation.
• Identify control gaps, document findings, and support risk assessments and root cause analysis.
• Track remediation activities and validate closure of audit findings.
• Maintain audit‑ready documentation and update GRC platforms, preferably SAP GRC.
• Prepare compliance reports and support internal and external audits.

Requirements

• 3–8 years of overall experience, with 2–4 years in SOX ITGC testing, IT audit, or IT risk advisory.
• Strong hands‑on experience in control testing, evidence review, and audit documentation.
• Good knowledge of SOX, ISO 27001, and SOC 2 frameworks.
• Experience with GRC platforms; SAP GRC preferred.
• Bachelor’s degree in IT, Computer Science, or a related field.
• Preferred Certifications: CISA, CISM, ISO 27001 LA/LI, SOC 2, or SOX certifications.