Job Details:
Job Title: IT SOX & SAP IT Controls Contractor
Location: 100% Remote
Duration: 6 Months Contract
Description:
The contractor will support Information Security & Risk Management (ISRM), Finance Compliance, technical teams, and internal/external audit partners in maintaining an effective and audit-ready IT SOX control environment for SAP-enabled financial processes. The role requires the ability to understand SAP financial processes conceptually and translate business and technical risks into practical IT General Controls (ITGCs).
Key Responsibilities
- Partner with ISRM, Finance Compliance, application owners, and technical teams to assess IT SOX impacts across SAP financial processes and supporting applications.
- Translate SAP financial process and technology concepts into appropriately designed ITGCs covering access management, change management, security configuration, interfaces, and related automated controls.
- Develop, update, and review risk and control matrices, control descriptions, process narratives, data flows, interface inventories, test procedures, and evidence requirements.
- Evaluate control design and operating effectiveness; identify gaps, recommend practical remediation, and track issues through closure.
- Support control owners with audit readiness, walkthroughs, evidence collection, testing requests, and responses to internal and external auditors.
- Coordinate across Finance, Technology, ISRM, and Audit to resolve control questions, align ownership and handoffs, and communicate status, risks, and decisions clearly.
- Help standardize, simplify, and automate controls where feasible without reducing SOX effectiveness.
Required Qualifications
- Bachelor’s degree in Information Technology, Accounting, Finance, or a related field.
- Strong knowledge of IT SOX, SOX Section 404, ITrisk and control principles, and audit evidence standards.
- Conceptual understanding of SAP Financials and end-to-end finance processes, including how financial data, configurations, roles, changes, and interfaces affect financial reporting.
- Hands-on experience designing, documenting, evaluating, or testing access, change, security configuration, and interface controls in an SAP or similarly complex environment.
- Ability to interpret technical designs and explain control requirements to both technical and nontechnical stakeholders.
- Strong analytical, documentation, project coordination, and professional communication skills; able to work independently and manage multiple audit-driven priorities.
Preferred Qualifications
8+ years of relevant IT audit, IT controls, compliance, or SAP risk experience; public-company or Big Four experience; CISA, CPA, CISSP, or equivalent certification; familiarity with SAP S/4HANA, GRC, BTP/integration technologies, continuous controls monitoring, and audit workflow tools.
