Job
Description
The Opportunity
Were looking for Staff to join the group of our EY GDS GRC Tech Team . This is a fantastic opportunity to be part of a leading firm whilst being instrumental in the growth of a new service offering.
Career Framework:
Interacts with business stakeholders to gather, understand, document, and analyse business requirements.Analyse reports and assessments to provide insights on whether a solution/technology being implemented is meeting business requirements.Evaluates business models, processes, and operations to develop a good understanding of business needs and requirements.Perform control testing for both ITAC ITGC as per the client scope and requirement.Work effectively as a team member, share responsibility, provide support, maintain communication and update senior team members on progress of tasks.Conduct research and assist senior team members in preparing client presentations and information memorandums.Continuously strive towards exceeding client team expectations and work on increasingly complex assignmentsDevelop and maintain productive working relationships with client/onsite personnel.
Experience, Background, Technical Skills Knowledge:
Candidate will have minimum 3-7 years of experience in SAP IT Audit with knowledge of IT governance practices.Should have a good functional understanding of the application/module being implemented and must be able to provide a holistic view from both business process risks and controls as well as roles and authorizations perspectives.Understanding of business processes, controls frameworks, compliances and regulations, and segregation of duty concepts in an SAP ERP environment (SAP ECC S4 HANA)Support client conversations to review/create Risk Control framework (RACM) to strength internal control program and minimise risks.Demonstrate sound technical understanding of Risk Control Assessment (RCA) for SAP environment. This includes, (a) analysis of existing processes to determine the effectiveness of controls and (b) an evaluation of failed controls.Good understanding of the COSO framework, Sarbanes-Oxley Act (Sections 302 and 404), GDPR etc. to help in having good client conversation.Strong experience in performing test of design and effectiveness for internal controls related to SOD, ITAC, ITDM, ICFR and IFRS along with the ability to suggest best practice recommendations.Good understanding of key Risks Controls within business processes such as Record to Report, Purchase to Pay and Order to Cash in SAP ECC/HANA environment.Good understanding of risks and controls for S/4 HANA modules (Simple Finance, Simple Logistics, Cash Management, TRM etc.) and Fiori appsStrong knowledge of automated, semi-automated and manual controls for configuration, data migration, interfaces to mobile devices and cloud platforms in SAP ECC and S/4 HANA environment.Good to have exposure in SAP Basis testing SAP ITGC testing will be preferable.Candidate with professional consulting experience in technology risk management ideally with a Big 4 or similar large consulting firm will be preferred.
Skills Capabilities:
Need to possess good written and verbal communication skills.Should possess the ability to conduct and drive workshops with the client stakeholders on understanding clients process system landscape.Work effectively as a team member and drive the delivery of IT audit documents independently.Demonstrate sound technical understanding of IT Audits (ITGC ITACs) for SAP environment.Knowledge of the COSO framework, Sarbanes-Oxley Act (Sections 302 and 404) etcInculcate positive learning attitude and the zeal to upskill as well as cross-skill.Understand and follow workplace policies and procedures.Participating in the organization-wide people initiativesMaintain an educational program to continuously upskill.
Technologies Tools:
SAP Functional KnowledgeKnowledge on Business ProcessesSAP ECC S4 HANAMS Office Tools