SAP Finance Security/Audit Controls Consultant

Job Title: SAP Finance Security/Audit Controls Consultant

Location: Remote



Duration: 12 months+

Position Overview

Client is seeking an IT SOX & SAP IT Controls Consultant to support Information Security & Risk Management (ISRM), Finance Compliance, technical teams, and internal/external auditors in maintaining an effective, audit-ready IT SOX control environment.

The consultant must understand SAP financial processes and translate business and technology risks into practical IT General Controls (ITGCs).

Key Responsibilities

• Partner with ISRM, Finance Compliance, application owners, and technical teams to assess IT SOX impacts across SAP financial processes and supporting applications.
• Design and evaluate ITGCs covering access management, change management, security configuration, interfaces, and related automated controls.
• Develop, update, and review risk and control matrices, control descriptions, process narratives, data flows, interface inventories, test procedures, and evidence requirements.
• Assess control design and operating effectiveness, identify gaps, recommend practical remediation, and track issues through closure.
• Support control owners with audit readiness, walkthroughs, evidence collection, testing requests, and responses to internal and external auditors.
• Coordinate across Finance, Technology, ISRM, and Audit to clarify control requirements, align ownership, and communicate status, risks, and decisions.
• Help standardize, simplify, and automate controls while maintaining SOX effectiveness.

Required Qualifications

• Bachelor's degree in Information Technology, Accounting, Finance, or a related field.
• Strong knowledge of IT SOX, SOX Section 404, ITGC risk and control principles, and audit evidence standards.
• Conceptual understanding of SAP Financials and end-to-end finance processes, including how financial data, configurations, roles, changes, and interfaces affect financial reporting.
• Hands-on experience designing, documenting, evaluating, or testing access, change management, security configuration, and interface controls in SAP or a similarly complex environment.
• Ability to interpret technical designs and explain control requirements to technical and nontechnical stakeholders.
• Strong analytical, documentation, project coordination, and professional communication skills.
• Ability to work independently and manage multiple audit-driven priorities.

Preferred Qualifications

• 8+ years of relevant IT audit, IT controls, compliance, or SAP risk experience.
• Public-company or Big Four experience.
• CISA, CPA, CISSP, or equivalent certification.
• Familiarity with SAP S/4HANA, SAP GRC, SAP BTP/integration technologies, continuous controls monitoring, and audit workflow tools.