SOX ITGC Consultant

About the role

We are seeking a SOX ITGC / IT Audit professional with 3–8 years of overall experience, including 2–4 years of hands‑on SOX ITGC testing, IT audit, or IT risk advisory. The role will focus on executing IT General Controls testing and ensuring compliance with SOX, ISO 27001, and SOC 2.

Key responsibilities

• Perform ITGC testing across Access Management, Change Management, IT Operations, and Logical Access.
• Conduct control walkthroughs, sample testing, and evidence validation.
• Identify control gaps, document findings, and support risk assessments and root‑cause analysis.
• Track remediation activities and validate closure of audit findings.
• Maintain audit‑ready documentation and update GRC platforms, preferably SAP GRC.
• Prepare compliance reports and support internal and external audits.

Required profile

• 3–8 years of overall experience with 2–4 years in SOX ITGC testing, IT audit, or IT risk advisory.
• Bachelor’s degree in IT, Computer Science, or a related field.
• Preferred certifications: CISA, CISM, ISO 27001 LA/LI, SOC 2, or SOX certifications.

Required skills

• Access Management
• Change Management
• IT Operations
• Logical Access
• SAP GRC (or other GRC platforms)
• Knowledge of SOX, ISO 27001, and SOC 2 frameworks