Salesforce ITGC Audit & Control Testing Specialist

Company Profile:Quantum Integrators is an international strategy and business consulting group whose mission is to help clients create and sustain competitive advantage. As a truly client-focused firm, our highly trained and experienced consultants consider it their mandate to help client organizations achieve a 'quantum state.

Position: Salesforce ITGC Audit & Control Testing Specialist

Location: Pune/Nagpur, Maharashtra (Onsite)

Duration: Full time

Shift: US Shift (06:30 PM - 03:30 AM IST)

Experience: 5+ years mandatory

We are hiring Salesforce ITGC Audit Specialists with strong experience in Salesforce security, audits, and control testing. Candidates should independently handle ITGC testing, data extraction, and audit evidence preparation across multiple Salesforce instances.

Key Responsibilities:

• Perform Salesforce SDLC phase control testing (migration plan, UAT, security approvals, data migration).
• Conduct ITGC controls testing across Logical Security, Change Management, and IT Operations.
• Handle user provisioning/deprovisioning, access reviews, admin access, emergency access, and security parameter checks.
• Validate change processes, development/debug access, infrastructure monitoring, incident/problem management, and server patching.
• Execute data extraction, audit queries, and evidence collection.

Requirements:

• Minimum 5 years in Salesforce security audits/ITGC testing.
• Strong knowledge of Salesforce audit processes.
• Excellent communication; able to work independently.

Key Responsibilities:

1. Salesforce SDLC Phase Controls Testing (Approx. 5 Controls)

• Evaluate System Migration Plans (Project Charter)
• Validate User Acceptance Testing (UAT) Approvals
• Review Data Migration Approvals
• Assess System Migration Security Approvals
• Verify Data Migration Go-Live Approvals

2. Salesforce ITGC Controls Testing (Approx. 30 Controls across 2 instances)

• Logical Security Controls
• User Provisioning (creation/change)
• User De-provisioning
• User Access Reviews
• Authentication & Security Parameter Validation
• Access to Security Parameters
• Default Account Management
• Admin Access Controls
• Emergency Access Handling
• Change Management Controls
• Change Process Compliance
• Change Settings Review
• Development Access
• Debug Access
• Computer & Network Operations Controls
• Infrastructure Monitoring
• Problem & Incident Management
• Network Security & Server Patching Validation

3. ITGC Queries, Data Extraction & Evidence Collection (Approx. 12 Controls)

• Extract and validate audit-relevant data
• Prepare evidence for internal and external auditors
• Provide clarifications and respond to audit queries