GRC Analyst (Audit & Oracle EBS Applications)

Job Summary

We are looking for a GRC Analyst with strong experience in IT auditing, Governance, Risk & Compliance (GRC), and Oracle E-Business Suite (Oracle EBS). The candidate will be responsible for supporting IT risk assessments, internal and external audits, compliance activities, access reviews, control testing, and remediation tracking, with a strong focus on Oracle EBS applications.

Key Responsibilities

• Perform IT General Controls (ITGC) and application control assessments across IT systems, with a primary focus on Oracle EBS.
• Support internal audits, external audits, SOX audits, and compliance assessments.
• Evaluate the design and operating effectiveness of IT controls and identify control gaps.
• Perform Oracle EBS user access reviews, segregation of duties (SoD) analysis, and privileged access reviews.
• Review Oracle EBS roles, responsibilities, privileges, and access provisioning/de-provisioning processes.
• Identify and assess GRC risks, control deficiencies, and compliance gaps.
• Coordinate with application owners, IT teams, business stakeholders, and auditors to obtain audit evidence.
• Maintain audit documentation, control matrices, risk registers, and evidence repositories.
• Track audit findings and remediation plans through closure.
• Assist in developing and maintaining Risk and Control Matrices (RCMs).
• Support periodic user access certification and review activities.
• Evaluate change management, incident management, backup/recovery, and other ITprocesses.
• Assist with SoD conflict analysis and remediation within Oracle EBS.
• Prepare management reports, audit dashboards, and compliance status updates.
• Support continuous improvement of governance, risk, and compliance processes.

Required Skills & Experience

• 3–6 years of experience in GRC, IT audit, IT risk, compliance, or related areas.
• Strong hands-on experience in IT Auditing and ITtesting.
• Good working knowledge of Oracle EBS applications and related access/control processes.
• Experience with Oracle EBS user access, roles, responsibilities, and SoD controls.
• Knowledge of audit frameworks and compliance requirements such as SOX, COBIT, ISO 27001, or similar frameworks.
• Experience in preparing audit evidence and working with internal/external auditors.
• Strong understanding of access management, change management, and application controls.
• Experience in identifying control gaps, documenting findings, and tracking remediation.
• Strong analytical, documentation, communication, and stakeholder-management skills.
• Good knowledge of MS Excel and reporting tools.

Preferred Qualifications

• Certifications such as CISA, CRISC, CIA, or ISO 27001 are preferred.
• Experience with GRC tools such as ServiceNow GRC, Archer, SAP GRC, or similar platforms.
• Experience with Oracle EBS modules such as Financials, Procurement, Inventory, HRMS, or related modules.
• Knowledge of Oracle EBS database/security concepts and audit reporting is an advantage.