Job Title: Senior Executive | ITGC - SAP GRC | Hyderabad | Sustainability & Emerging Assurance

Senior Executive | ITGC - SAP GRC | Hyderabad | Sustainability & Emerging Assurance
• Job requisition ID : 114380
• Location: Hyderabad
• Entity: Deloitte Touche Tohmatsu India LLP
Your Role
We are looking for an experienced SAP SOX ITGC Auditor with 3–4 years of experience in SAP ERP (ECC/S/4HANA) and SAP GRC to support SOX compliance and IT audit engagements. The ideal candidate should have hands-on experience in SAP security, SAP GRC Access Control, IT General Controls (ITGC), Segregation of Duties (SoD), and SAP change management. Experience working with internal/external audits and regulatory compliance is essential.
Key Responsibilities
- Perform SOX ITGC testing for SAP ERP environments, including User Access Management, Change Management, and IT Operations.
- Evaluate SAP Security, SAP GRC Access Control, SoD conflicts, Firefighter access, and user provisioning processes.
- Conduct walkthroughs, control testing, evidence review, and documentation of audit observations.
- Assess SAP transport management, emergency changes, and access governance controls.
- Collaborate with business, SAP Basis, Security, and Internal Audit teams to support audit engagements and remediation activities.
- Prepare high-quality audit workpapers, reports, and communicate findings to stakeholders.
Key Skills Required
- 3–4 years of experience in SAP IT Audit, SOX ITGC, SAP Security, and SAP GRC.
- Strong knowledge of SAP ECC/S/4HANA, SAP GRC Access Control (ARA, ARM, EAM), and Segregation of Duties (SoD).
- Experience with SOX 404 compliance, ITGC testing, and audit methodologies.
- Good understanding of COBIT, ITIL, and risk & control frameworks.
- Excellent communication, analytical, and stakeholder management skills.
- Education: Bachelor's degree in Computer Science, Information Technology, Information Systems, or a related field.
Preferred Certifications
- SAP Certified Associate (SAP Security, SAP S/4HANA, or SAP GRC)
- CISA, CISM, CRISC, or equivalent professional certification
