SOX ITGC Consultant

About the role

Join our team as a SOX ITGC Consultant, responsible for ensuring the integrity of IT general controls across critical domains. You will work closely with audit and compliance teams to assess control effectiveness and support regulatory reporting.

Key responsibilities

• Perform ITGC testing across Access Management, Change Management, IT Operations, and Logical Access.
• Conduct control walkthroughs, sample testing, and evidence validation.
• Identify control gaps, document findings, and support risk assessments and root cause analysis.
• Track remediation activities and validate closure of audit findings.
• Maintain audit‑ready documentation and update GRC platforms, preferably SAP GRC.
• Prepare compliance reports and support internal and external audits.

Required profile

• 3–8 years of overall experience, including 2–4 years in SOX ITGC testing, IT audit, or IT risk advisory.
• Strong hands‑on experience in control testing, evidence review, and audit documentation.
• Good knowledge of SOX, ISO 27001, and SOC 2 frameworks.
• Experience with GRC platforms; SAP GRC preferred.
• Bachelor’s degree in IT, Computer Science, or a related field.
• Preferred certifications such as CISA, CISM, ISO 27001 LA/LI, SOC 2, or SOX certifications.

Required skills

• SAP GRC