Senior Specialist for IT Applications and General controls

Overview

Senior Specialist for IT Application and General Controls (ITAC/ITGC) within Sanofi's Internal Control & Processes Testing Center of Excellence, executing SOX IT controls testing and supporting control self-assessment and automation initiatives.

What you'll do

• Support Internal Control Global Process Leads in creating and updating test scripts for SOX and non-SOX testing, sharing constructive feedback and best practices.
• Coordinate the CSA campaign by consolidating the Local Process Owners list, updating tools, and following CSA completion and sign-off.
• Set up and conduct SOX ITAC and ITGC testing in coordination with external auditors, SOX entities, and SOX leads, including SOC report analysis for in-scope third parties.
• Test IT Application Controls including IT Dependent controls (automated controls, key reports, interfaces), User Access Management (UAM) and Segregation of Duties (SOD).
• Test Digital SOX ITGC and High Risk controls in coordination with external auditors, Digital control owners, and Digital Risk & Compliance Leads, in compliance with the Digital Control Framework.
• Support control owners in identifying compensatory controls and remediation actions when deficiencies arise.
• Support execution of CSA campaigns by reviewing completeness and relevancy of control attestations.
• Perform quality review of testing performed by other testers to ensure proper completion and alignment with requirements.
• Drive automation within SOX, CSRD and IC testing processes using data analytics and emerging technologies.
• Understand in-scope applications, infrastructure and third parties; review prior year test results and Sanofi methodology; obtain and manage access to Sanofi systems including the GRC system.
• Conduct process walkthroughs and interviews during the design phase to map control flows and identify ITDs.
• Submit evidence requests to control owners, monitor delays and issues affecting testing orchestration, and report them.
• Analyze SOC reports per Sanofi's methodology, report CUECs and CSOCs, and ensure proper testing.
• Identify and monitor risks related to ITGC and IT Application Controls.
• Continuously improve testing methodology in line with regulatory changes, new requirements and new technologies.

What you'll need

• 5+ years of experience from Big 4 firms or multinational organizations in SOX IT Application Controls and IT General Controls audit.
• Demonstrated knowledge of SOX compliance requirements and testing methodologies.
• Expert knowledge of ITGC, ITAC and IT Dependent controls (ITDs).
• Deep expertise in automated controls, key reports, interfaces, UAM and SOD.
• Experience with SOC report analysis and PCAOB requirements.
• Knowledge or experience in Accounting / Financial reporting.
• Understanding of CSRD frameworks and reporting processes.
• Experience with IT Core Model solutions and ERP systems (SAP, Oracle, Workday, etc.).
• Experience with IT infrastructure layers (operating systems, databases).
• Experience in implementing automation solutions.
• Education: college-level degree in Audit, IT Audit or similar, or an engineering degree in Computer Science.
• Core competencies: ITAC/ITGC design, testing and remediation; critical thinking and problem-solving; financial systems and IT risk domains (GxP, Privacy, Security, SOX); SOC report analysis and third-party risk assessment; data analytics, automation tools and continuous monitoring.
• Strong stakeholder management and influencing skills; excellent written and verbal communication in English; adaptability in a fast-paced environment; ability to mentor junior team members.
• Fluency in English (written and spoken) is required.

Nice to have

• Professional certification (CISA, CIA, or equivalent).
• Background with Big 4 audit methodology.

Details

• Location: Hyderabad.
• Reports to the IC&P CoE ITAC/ITGC Lead.