GITC SAP Manager

Manager, Technology Controls Advisory, Audit and Assurance

Deloitte is seeking a Manager, Technology Controls Advisory, Audit and Assurance to support client engagements focused on technology risk, internal controls, and compliance. This role will work with cross-functional teams to evaluate technology-enabled business processes, assess control environments, and support organizations in strengthening governance and risk management. The role also includes leading workstreams, managing stakeholder expectations, and contributing to high-quality client delivery across audit and advisory priorities

Work youll do
As a Manager, you are expected to demonstrate integrity, values, principles, and work ethic, lead by example, and make a positive contribution. You will:

• Identify and evaluate complex business/ technological risks, internal controls which mitigate risks, and related opportunities for internal control improvement
  • Perform system evaluation and/or audit IT and business process as a part of SOX 404, SSAE 18 or ICFR assessment in accordance with PCAOB/AICPA guidance using Deloitte methodology for whole point
  • Perform complete GITC evaluation and testing across IT platform including, operating systems, databases, and network components
  • Perform risk assessment for organizations to identify prioritized list of risk/audit
  • Perform controls benchmarking to leading internal controls framework to identify gaps and excess controls
  • Manage multiple assignments and demonstrate strong people management & networking skills
  • Ensure timely completion of activities with quality, complete ownership of deliverables and early escalations to management, if required
  • Play substantive/lead role on projects including project planning, economics, and managing quality
  • Participate in proposal development efforts
  • Assist in technical knowledge development and training efforts
  • Demonstrate high level of understanding of internal and external client's business
  

Qualification
• Bachelor’s degree
• MBA in Finance/Accounting/IT/Information security and or CA/CPA/CIA/CISA/CISSP

Required skills
• 8+ years of relevant work experience, with industry focus a plus
• Strong orientation toward internal control risk assessment, operational, and IT auditing
• Hands on experience on testing of SAP GITC controls(Change Management, Access Security, UAR) Test of design(TOD) and test of operating effectiveness (TOE)
• Have tested SAP Automated controls (3 way match, duplicate invoices, copy controls etc) across SAP ECC, S/4 HANA
• Experience of assessing and reviewing technology risks and controls over areas including access management, change management & computer operations for IT platforms (operating systems, databases, and network components)
• Exposure to any one industry—Financial Services; Technology, Media & Telecom; Life Sciences & Health Care; Energy & Resources; Consumer & Industrial Products
• Demonstrate MS office proficiency, problem solving & analytical skills, and strong verbal & written communication skills
• Ability to prioritize tasks, work on multiple assignments, manage ambiguity, and work independently or as part of a team with professionals at all levels
Preferred skills
• Big Four experience preferred
• Hands-on experience/understanding of security (SAP ECC, S/4 HANA, GRC AC and PC, SAP B/W) and functioning of ERP (At least one of - SAP or Oracle EBS or JDE or Peoplesoft or Netsuite or Workday or SAP Ariba)
• Understanding of SAP Cloud will be added advantage