SAP IT Audit Senior Consultant

Overview:

We are seeking an experienced professional with 35 years of hands-on experience in SAP Risk and Controls. The ideal candidate should have strong expertise in SAP ECC/S/4HANA environments, core business processes, and control frameworks. In this role, the individual will function as a Subject Matter Expert (SME), lead key project activities, and play a critical role in ensuring high-quality project execution and strong client satisfaction.

Key Responsibilities:

• Project Execution & Consultation:

  Lead and contribute to all phases of SAP risk and controls engagements, including pre-implementation advisory, post-implementation reviews, and comprehensive application/Infra control testing, Audit trail assessments etc., while providing informed guidance to clients and project teams.

• Subject Matter Expert (SME):

  Serve as a functional/technical SME within project teams, ensuring the successful delivery of solutions.

• Process Analysis:

  Conduct thorough process walkthroughs and targeted inquiries to understand the clients system landscape, transaction flows, and overall business processes comprehensively.

• Client Engagement & Risk Management:

  Lead client discussions, effectively reporting observations, highlighting potential risks, identifying appropriate mitigation controls, and driving consensus on corrective actions.

• Problem Solving:

  Focus on resolving complex client issues and challenges through innovative and practical solutions.

• Communication & Reporting:

  Adhere to established communication protocols for consistently reporting project status, managing risks, and disseminating mitigation plans to stakeholders and project leadership.

• Additional Responsibilities for Senior Consultants

Team Collaboration & Mentorship:

Business Development & Innovation:

Documentation Standards:

Client Relationship Management:

Mandatory Technical & Functional Skills:

• Controls Testing Expertise:

  Experience in testing IT Application/Automated Controls (ITAC), IT General Controls (ITGC), Key reports, and business process controls.

• SAP Business Process Knowledge:

  Strong understanding of core business processes including Order-to-Cash (OTC), Procure-to-Pay (PTP), and Record-to-Report (RTR), coupled with knowledge of control frameworks, compliance, regulations, Sensitive Access (SA) and Segregation of Duties (SOD) concepts in both SAP ECC and S/4 HANA environments.

• System Knowledge:

  Robust functional knowledge and hands-on experience in SAP ECC and S/4HANA, including Audit trail evaluation (MCA guidelines), configuration reviews, and SAP security concepts.

• Risk Assessment:

  Experience in performing comprehensive risk and controls assessments for both system access controls and business process controls.

• Audit & Review Experience:

  Hands-on experience spanning different phases of SAP audits and pre/post-implementation reviews, including conducting process walkthroughs, performing tests of design (TOD) and operational effectiveness (TOE), drafting insightful observations, performing business impact analysis, and facilitating business response cycles.

• S/4HANA Specialization:

  Exposure to S/4HANA controls design (Risk and Control Matrix - RACM), implementation of controls, functional and risk support for SOD reviews, and internal controls assessments.