SAP/Oracle IT Audit Deputy Manager

Role Overview:

We are seeking a detail-oriented and experienced Internal IT Auditor to join our dynamic Risk Consulting practice in India as a Deputy Manager, focusing specifically on IT application audit of SAP and Oracle.

This role offers a unique opportunity to apply your expertise in internal IT Audit, with a strong emphasis on SAP/Oracle IT application controls within the Financial Services (FS) and Telecom industry. You will be responsible for planning, executing, managing the team and reporting on internal IT audits to assess the effectiveness of IT controls, identifying risks, and providing value-added recommendations to our clients.

Responsibilities:

• Internal IT Audit Planning & Execution:
• Development of risk-based internal IT application audit plans for SAP/Oracle, considering industry-specific risks and regulatory requirements.
• Plan and lead the internal IT application audit engagements focusing on SAP/Oracle Risk and Controls projects, ensuring high-quality delivery and client satisfaction.
• 
  Define audit scope, objectives, and testing procedures in alignment with internal audit methodologies and client needs.
• Manage detailed reviews of IT application controls, including access controls, change management, data integrity, system interfaces, and Input - Processing - Output controls.
• Conduct SAP pre/post-implementation reviews to identify and mitigate potential risks. Perform SAP audits, focusing on system integrity and data accuracy
• Evaluate the design and operating effectiveness of IT general controls (ITGC) and IT application controls (ITAC) within the client environment.
• Utilize functional knowledge of key business processes such as Order To Cash, Procure To Pay, and Record To Report to enhance control frameworks.
• Perform audit testing, gather and analyze evidence, and document audit findings in accordance with professional standards.
• Reporting & Recommendations:
• Prepare clear, concise, and well-supported audit reports outlining findings, risks, and recommendations for improvement to management.
• Communicate audit findings effectively to client stakeholders, both verbally and in writing.
• Track and follow up on the implementation of audit recommendations.
• Provide thought leadership and insights on SAP/Oracle risk and control trends and best practice.
  
  

• Possess a Bachelors / Master’s Degree in Information Technology/ Management Information System / Computer Science and related discipline;
• Strong experience in performing tests of design and effectiveness for internal controls related to SOD, ITAC, ITDM, ICFR and IFRS along with the ability to suggest best practice recommendations.
• Proven experience in SAP/Oracle Risk and Controls projects.
• 4+ years of experience in internal IT audit, preferably within the Financial Services (BSFI) and Telecom sector.
• Familiarity with key business processes (Order To Cash, Procure To Pay, Record To Report).
• Excellent project management and leadership skills.
• Strong understanding of IT audit principles, methodologies, and risk assessment frameworks.
• Proven experience in auditing IT general controls (ITGC) and IT application controls (ITAC).
• Excellent analytical, problem-solving, and critical thinking skills.
• Strong written and verbal communication skills, including the ability to articulate complex technical issues to both technical and non-technical audiences in English.
• Ability to work independently and as part of a team.
• Relevant certifications such as CISA, CIA or other IT audit/security-related certifications are a plus.