Specialist for IT Applications and General Controls

Overview

Specialist – IT Application & General Controls (ITAC/ITGC) role in Sanofi's Internal Control & Processes Testing Center of Excellence, executing ITAC and ITGC testing as part of the 2nd Line of Defense.

What you'll do

• Set up and conduct SOX ITAC and ITGC testing in coordination with external auditors, SOX entities and SOX leads, including SOC report analysis for in-scope third parties.
• Test IT dependent controls (automated controls, key reports, interfaces), User Access Management (UAM) and Segregation of Duties (SOD).
• Test Digital SOX ITGC and High Risk controls for Digital solutions in compliance with the Digital Control Framework.
• Support execution of Control-Self-Assessment (CSA) campaigns by reviewing completeness and relevancy of control attestations.
• Perform quality review of testing performed by other testers.
• Support control owners in identifying compensatory controls and remediation actions when deficiencies arise.
• Conduct process walkthroughs and interviews to map control flows and identify ITDs; request evidence from control owners and report delays.
• Identify and implement automation opportunities within SOX, CSRD and IC testing processes.

What you'll need

• Minimum 3-5 years of experience auditing companies in SOX IT Application Controls and IT General Controls.
• Demonstrated knowledge of SOX compliance requirements and testing methodologies.
• Expert knowledge of ITGC, ITAC and IT Dependent controls.
• Deep expertise in automated controls, key reports, interfaces, UAM and SOD.
• Experience with SOC report analysis and PCAOB requirements.
• Knowledge or awareness of, or experience in, accounting or financial reporting.
• Understanding of CSRD frameworks and reporting processes.
• Experience with IT Core Model solutions and ERP systems (SAP, Oracle, Workday, etc.).
• Experience with IT infrastructure layers (operating systems, databases).
• Experience in implementing automation solutions.
• Education: graduated college level in Audit, IT Audit or similar, or an engineering degree in Computer Sciences.
• Fluency in English (written and spoken) is required.

Nice to have

• Professional certification (CISA, CIA, or equivalent).
• Background with Big 4 audit methodology.

Details

• Location: Hyderabad.
• Reports directly to the IC&P CoE ITAC/ITGC Lead.