1. Technical:
4+ years of working experience and strong understanding of IT risks, processes and controls, User Access Management process, Backup and restore process, Change Management, Logical Security and Application Security cycle areas for technologies: Mainframe, AWS, Azure, Google Cloud, Database (Oracle, MSSQL), UNIX, Windows, Teradata OS, Web Methods, Active Directory and Tableau
Evaluate IT risks from SOX perspective.
Perform Design and operating effectiveness test of ITGCs as well as application controls.
Evaluate Design and performance of automated/configuration controls.
Liaise with client as well as external auditors for requirements and questions.
Finalize Issues noted and discuss it with the required stakeholders to bring it to closure.
Document Test work papers with precision and detail.
Understanding of IT risks, processes, and controls
Working experience as Internal Auditor in ITGC area is a plus.
Understanding of Cloud architecture and models
Knowledge of Information Asset management, Third-Party risk management, HR processes, SELM tools & SOC process etc.
Excel skills required - VLOOKUP, Duplicates, Conditional formatting etc.
Visio for flowcharting
2. Soft skills:
Must have good communication skills (written and spoken)
Multi-tasking and takes initiative - Needs to manage scope changes/management requests/project requirements independently.
Quick-learner – Needs to understand new tools, technologies and changing environment.
Needs overall good organization & ability to track and prioritize.
Educational Qualification should be a Master/CISA.
3. Work Type:
Hybrid – Working Partly From Home And Partly From Office
ResponsibilitiesConduct risk assessments to identify areas of potential IT weaknesses and recommend corrective action
Develop and maintain role matrices, including segregation of duties (SoD) and critical access reviews.
Perform risk assessments to identify potential security issues and develop mitigation plans.
Manage user provisioning and deprovisioning processes, ensuring accurate role assignments.
Conduct role testing and validation to ensure proper functionality and compliance.
Lead in S/4 Hana SAP projects, including upgrades, migrations, and implementations.
Provide training and support to end-users and other stakeholders on role and authorization management.
Fair knowledge of design, implementation, assessment and testing of ITGC (IT general controls) and automated application controls related to SOX compliance.
Document all role design and implementation activities, ensuring thorough and accurate records.
Provide training and support to end-users and other stakeholders on SAP security policies and procedures.
Support the audit process by providing necessary documentation and responding to audit inquiries.
Assist to Design, implement, and manage S4 Hana SAP security solutions, including role based access controls, user provisioning, and authorization concepts.
Develop and enforce security policies, procedures, and best practices for S4 SAP systems.
Ensure compliance with industry regulations and standards, such as SOX.
Stay updated with the latest security threats, vulnerabilities, and mitigation techniques.
Support assessment of risk management and risk mitigation adequacy
Graduate in Information Technology, Computer Science, Business Administration, or a related field. SAP certification in S/4 Hana. 4-6 years of audit / consulting experience.
Skills Required
- 4-6 years of audit/consulting experience
- 4+ years working with IT risks, processes, and controls
- Experience testing ITGCs and automated application controls (design and operating effectiveness)
- Experience with User Access Management, Backup/Restore, Change Management, Logical/Application Security
- Experience with Mainframe, AWS, Azure, Google Cloud, Oracle, MSSQL, UNIX, Windows, Teradata, WebMethods, Active Directory, Tableau
- Understanding of cloud architecture and models
- SAP S/4HANA certification and experience in SAP security, role design, and authorization management
- Graduate in Information Technology, Computer Science, Business Administration, or related field
- Master's degree or CISA certification
- Strong Excel skills (VLOOKUP, duplicates, conditional formatting)
- Visio proficiency for flowcharting
- Experience with Information Asset Management, Third-Party Risk Management, SELM tools and SOC processes
- Strong written and spoken communication skills
- Ability to document test workpapers, liaise with clients and external auditors, and finalize issue remediation
What We Do
Choosing a digital partner is about more than capabilities — it’s about collaboration and character. Unrealistic overhauls and off-the-shelf products ignore what matters most — your unique needs, culture, goals, and your legacy data and technology environments. At EXL, our collaboration is built on ongoing listening and learning to adapt our methodologies. We’re your business evolution partner—tailoring solutions that make the most of data to make better business decisions and drive more intelligence into your increasingly digital operations. Whether your goals are scaling the use of AI and digital, redesign operating models, or driving better and faster decisions, we’re here to partner with you to help you gain—and maintain—competitive advantage with efficient, sustainable models at scale. Our expertise in transformation, data science, and change management helps make your business more efficient and effective, improve customer relationships and enhance revenue growth. Instead of focusing on multi-year, resource- and time-intensive platform designs or migrations, we look deeper at your entire value chain to integrate strategies with impact. We use our specialization in analytics, digital interventions, and operations management—alongside deep industry expertise — to deliver solutions that help you outperform the competition. At EXL, it’s all about outcomes—your outcomes—and delivering success on your terms. Share your goals with us and together, we’ll optimize how you leverage data to drive your business forward. For more information, visit www.exlservice.com.
