Oracle Fusion ITGC Analyst
SAS
- Location
- Pune Division, Maharashtra, India
- Job type
- Full-time
Required skills
- accounting
- Active Directory
- Azure
- change management
- compliance
- configuration management
- cross-functional
- data analytics
- Fusion
- Oracle
- SAS
- SQL
- SOX
About the role
SAS
Website:
sas.com
Job details:
Support Oracle Fusion Financials and ITGC processes in a global enterprise environment
Primary Responsibilities
- Serve as the CIS division-wide subject matter expert for IT General Controls, SOX compliance, technology controls, and PCAOB audit readiness.
- Develop and maintain consistent ITGC policies, standards, control procedures, documentation, and evidence requirements across in-scope CIS applications and technologies.
- Partner with application owners, administrators, developers, infrastructure teams, Finance, Internal Audit, and other stakeholders to incorporate compliance by design into systems, integrations, changes, and operational processes.
- Configure and administer Fastpath GRC for User Access Reviews, segregation-of-duties monitoring, access-risk analysis, mitigating controls, audit-log reviews, and compliance reporting.
- Coordinate periodic access reviews and monitor privileged access, service accounts, segregation-of-duties conflicts, and joiner, mover, and leaver controls.
- Oversee controls for system development, change management, configuration changes, production migrations, computer operations, interfaces, batch processing, and audit logging.
- Conduct ITGC risk assessments, control walkthroughs, self-assessments, compliance reviews, and evaluations of control design and operating effectiveness.
- Identify control gaps, perform root-cause analysis, and coordinate sustainable remediation of deficiencies and recurring exceptions.
- Act as the primary CIS liaison with internal and external auditors for ITGC walkthroughs, questionnaires, evidence requests, testing, findings, and remediation.
- Maintain an audit-ready documentation library, including control narratives, risk and control matrices, access reviews, change evidence, test results, SOC reports, bridge letters, and remediation records.
- Review third-party assurance reports and coordinate responses to exceptions, complementary user-entity controls, and other service-provider risks.
- Develop and deliver division-wide training, job aids, and guidance on SOX, ITGC, access governance, change controls, audit evidence, and control-owner responsibilities.
- Provide CIS leadership with reporting on audit readiness, control execution, deficiencies, remediation progress, and emerging compliance risks.
- Stay current on SOX Section 404, PCAOB, COSO, COBIT, ITGC, identity governance, cloud controls, and public-company compliance requirements.
Requirement
- Typically requires 4–6 years of experience in IT audit, IT risk and compliance, SOX, ITGC, application controls, financial systems, or a related technology-control function.
- Demonstrated experience designing, operating, assessing, or auditing ITGCs across enterprise applications and supporting technologies.
- Strong knowledge of access management, privileged access, segregation of duties, change management, system development, computer operations, interfaces, configuration management, and audit logging.
- Experience supporting SOX Section 404 compliance or audits of internal control over financial reporting.
- Experience conducting risk assessments, control walkthroughs, self-assessments, control testing, deficiency evaluations, and remediation validation.
- Experience coordinating with internal and external auditors and preparing complete, reliable, and timely audit evidence.
- Experience developing policies, procedures, control narratives, risk and control matrices, testing documentation, and audit workpapers.
- Familiarity with GRC, identity-governance, access-certification, audit-management, or compliance-monitoring applications.
- Understanding of SOC reports, bridge letters, complementary user-entity controls, and third-party assurance requirements.
- Strong analytical, project-management, communication, and stakeholder-influencing skills.
- Ability to work independently and coordinate compliance activities across global, cross-functional teams.
- Bachelor’s degree in Accounting, Finance, Information Systems, Computer Science, Cybersecurity, Information Technology, or a related field.
- Equivalent combinations of education, training, professional certifications, and relevant experience may be considered.
- You’re curious, passionate, authentic, and accountable. These are our values and influence everything we do.
Mandatory Technical Skills
- CISA, CIA, CPA, CRISC, CISM, CISSP, CGEIT, or a comparable audit, risk, security, or compliance certification.
- Experience supporting PCAOB-regulated audits in a public company or public-company-readiness environment.
- Experience in IT audit, technology risk, or controls advisory with a major accounting or professional-services firm.
- Hands-on experience administering Fastpath GRC or a similar enterprise GRC platform.
- Experience with Oracle Fusion Cloud ERP, Oracle EPM Cloud, Workday, Boomi, Microsoft Azure, Active Directory, databases, data warehouses, or other enterprise technologies.
- Experience with identity governance, role-based access, privileged-access management, service accounts, and joiner, mover, and leaver controls.
- Experience evaluating automated controls, system-generated reports, interfaces, data integrity, and information produced by the entity.
- Working knowledge of SQL, reporting tools, data analytics, or continuous-control monitoring.
- Experience supporting multinational technology environments, shared services, subsidiary audits, or geographically distributed teams.
- Demonstrated ability to train and guide technical and nontechnical stakeholders on SOX and ITGC responsibilities.
- Strong customer-service orientation with the ability to challenge ineffective practices and escalate unresolved compliance risks.
Click on Apply to know more.
This page is fully interactive when JavaScript is enabled. Please enable JavaScript to apply or browse related roles.