SAP IT General Controls Consultant

BNC has been exclusively mandated to recruit for an experienced SAP ITGC Consultant for one of our prestigious Big 4 clients, based at Gurgaon office. This is a permanent opportunity and we are looking for immediate joiners.

Key Responsibilities:

1. Perform IT General Controls (ITGC) testing across SAP systems (user access, change management, backup/recovery, etc.).

2. Assist in the design, implementation, and monitoring of IT controls to ensure compliance with SOX, ISO, and other audit requirements.

3. Evaluate control effectiveness and report findings to relevant stakeholders and auditors.

4. Support internal and external audit processes by providing evidence, walkthroughs, and remediation tracking.

5. Collaborate with DevOps teams to integrate control requirements into CI/CD pipelines and cloud-native applications.

6. Provide technical support for control automation initiatives and continuous control monitoring using Azure DevOps or equivalent tools.

7. Ensure proper documentation of controls, procedures, and findings in alignment with IT risk and compliance frameworks.

8. Contribute to cloud governance efforts, especially within Microsoft Azure environments.

9. Identify and suggest improvements for SAP security roles and authorizations to enhance control effectiveness.

Key Requirements:

1. CA or Non-CA candidates are preferred.

2. 2-5 years of hands-on experience in SAP ITGC testing and assessment.

3. Proficiency with IT controls frameworks such as SOX, COBIT, or ISO 27001.

4. Experience working with SAP security concepts (e.g., user provisioning, role management, change management).

5. Exposure to cloud environments, specifically Microsoft Azure, and an understanding of cloud-native control considerations.

6. Familiarity with DevOps tools and processes, particularly Azure DevOps, Jenkins, or GitHub Actions.

7. Good understanding of audit principles and working with internal/external audit teams.

8. Strong analytical, documentation, and communication skills.