The Internal Audit (“IA”) Department is seeking a highly motivated IT SOX Senior to join our Internal Audit team in the retail industry. This role will be based in Hyderabad (Gap HDC) and will partner closely with global Internal Audit, IT, and business stakeholders to ensure effective design, implementation, and testing of IT General Controls (ITGCs), automated controls, and key reports.
The ideal candidate will bring strong technical expertise, leadership capability, and a proactive and innovation mindset to drive compliance excellence and continuous improvement.What You'll DoWhat You'll Do:
- Execute IT SOX testing, including IT General Controls (ITGCs) (access, change management, IT operations) and IT Application Controls (ITACs) across in-scope systems.
- Perform control design and operating effectiveness testing, ensuring accuracy, completeness, and adherence to SOX and internal audit standards.
- Support annual SOX planning and scoping activities, including identification of in-scope systems, applications, and key reports.
- Conduct and document walkthroughs, including preparation of process narratives, flowcharts, and risk and control matrices (RCMs).
- Coordinate with control owners to request, collect, and validate audit evidence, ensuring timely and high-quality submissions.
- Evaluate system-generated reports (IUCs) for completeness and accuracy, including testing of report logic and data sources.
- Identify control deficiencies, perform root cause analysis, and support evaluation of impact to ICFR.
- Track remediation efforts, perform retesting of controls, and validate closure of identified issues.
- Partner with IT, Security, and business stakeholders to clarify control requirements and drive timely resolution of issues.
- Support external audit activities, including responding to requests, preparing documentation, and addressing follow-up questions.
- Maintain accurate and organized audit documentation in accordance with internal standards and SOX requirements.
- Contribute to continuous improvement initiatives, including standardization of testing approaches and enhancement of documentation quality.
- Identify opportunities to improve efficiency through automation, data analytics, and process optimization.
- Provide guidance and informal mentorship to junior team members, supporting knowledge sharing and team development.
Required:
- Bachelor’s degree in Information Systems, Computer Science, Accounting, or a related field.
- 3–5 years of experience in IT audit, SOX compliance, or IT risk management.
- Demonstrated experience performing control testing (design and operating effectiveness), including walkthroughs, evidence evaluation, and documentation.
- Experience with risk and control matrices (RCMs), narratives, and flowcharts.
- Working knowledge of IT environments, including applications, databases, infrastructure, and cloud platforms (e.g., AWS, Azure).
- Understanding of IT control frameworks and domains (e.g., access management, change management, IT operations) and familiarity with frameworks such as NIST, ISO 27001, or COBIT.
- Strong analytical and problem-solving skills, with the ability to identify issues and assess risk implications.
- Effective communication and interpersonal skills, with the ability to collaborate with stakeholders and manage audit requests.
- Strong organizational skills and attention to detail, with the ability to manage multiple priorities and meet deadlines.
Nice to Have:
- Professional certification such as CISA, CPA, CRISC, or progress toward certification.
- Experience working with external auditors and supporting SOX audits.
- Familiarity with SOC reports, CUECs, and reliance considerations.
- Experience with audit tools, data analytics, or GRC platforms (e.g., AuditBoard/Optro).
- Exposure to ERP systems (e.g., Oracle) or retail/consumer industry environments
Skills Required
- Bachelor's degree in Information Systems, Computer Science, Accounting, or related field
- 3-5 years of experience in IT audit, SOX compliance, or IT risk management
- Experience performing control testing, including walkthroughs and evidence evaluation
- Working knowledge of IT environments, including applications, databases, and cloud platforms
- Understanding of IT control frameworks such as NIST, ISO 27001, or COBIT
What We Do
In 1969, Don and Doris Fisher opened the first Gap store on Ocean Avenue in San Francisco. They wanted to make it easier to find a great pair of jeans, and they did. Their denim and records store was a hit, and it grew to become one of the world’s most iconic brands. Today we’re represented in more than 1400 stores in over 40 countries, and online. We have headquarters in New York, London, Shanghai, Tokyo, and, of course, San Francisco. Our unique aesthetic is optimistic cool, elevated American style. Our clothes are crafted with care, with focused attention to thoughtful design. We believe in staying true to our heritage while creating what’s next. Don and Doris Fisher always wanted to “do more than sell clothes.” They wanted to support the people who ran their company, to be active in their communities, and to have a positive impact on the world. Their vision helped transform retail, and we’re still following their lead. We stand for freedom and possibility for all; we champion diverse ideas that transcend generations, geographies and genders.
