ITGC & IT Application Controls, Sailpoint Mandatory

Role & responsibilities

ITGC & IT Application Controls Execution & QA

• Execute and/or coordinate testing of key ITGC domains
• Perform evidence reviews, qualitycheck samples, and maintain complete, auditdefensible artefacts (traceability, timestamps, owners).

IAM / Access Recertifications (SailPointenabled & via email)

• Administer and monitor user/role recertification campaigns; chase completions and escalate overdue reviews.
• Perform privileged access, toxic combinations and leaver (JML) QA checks; support breakglass access reviews.

External & Internal Audit Support

• Coordinate with PwC on IT controls requests, walkthroughs, samples and clarifications; provide structured evidence packs.
• Support Internal Audit engagements and openaction followup; provide closure evidence and retest results.

Uplift & Knowledge Transfer

• Coach two internal analysts on test approach, sampling, evidence quality and auditready documentation.
• Standardize templates (test scripts, evidence index, exception forms) and produce concise SOPs/playbooks.
• Identify quickwin efficiency improvements and propose a light backlog for continuous improvement (e.g., automation candidates).

Preferred candidate profile

- 3+ years experience in IT Risk, Controls, Audit, or Technology Assurance.
- Skilled in liaising with external auditors (PwC, KPMG, EY, etc.) on ITGC testing.
- Familiar with SailPoint, PAM, ServiceNow and recertification processes