ITGC Specialist Consultant

Job Description – IT Risk Specialist (Consultant)

The role involves supporting IT risk and controls engagements, with a focus on ITGC testing, control evaluations, and risk assessments across enterprise systems. The consultant works closely with audit teams and client stakeholders to strengthen internal control environments.

Reports to: Manager

Works with: Audit, Risk Advisory, and client stakeholders

• Execute IT general controls (ITGC) testing across key domains such as access management, change management, and IT operations
• Evaluate design and operating effectiveness of controls, including walkthroughs and evidence review
• Define and standardize test procedures aligned with audit objectives and regulatory frameworks
• Prepare structured Risk Control Matrix (RCM) documentation including risks, controls, and results
• Identify control gaps and clearly articulate findings and associated risks
• Coordinate with stakeholders to obtain audit evidence and ensure timely closure
• Support engagement planning, tracking, and reporting
• Contribute to improvement of audit methodologies and templates

• B-Tech / BE / BCA / MCA / MBA (IT/Systems) or CA with DISA
• CISA / ISO 27001 LA / CISSP would be a plus
• 2–3 years of relevant experience in audit or professional services
• Hands-on ITGC testing experience across key domains
• Experience in ERP systems such as SAP, Oracle, or MS Dynamics
• Ability to evaluate audit evidence such as logs, user listings, and change records
• Strong risk articulation and documentation skills
• Experience interacting with client stakeholders
• Strong communication and project management skills

1. Core Skills:

• IT General Controls (ITGC) testing
• SAP ITGC control testing
• Understanding of SOX / ICFR / Internal Audit

1. Preferred Skills:

• IT Application Controls (ITAC)
• SOC 1 / SOC 2
• Audit trail and log analysis

• SAP (ECC/S4HANA), Oracle EBS, MS Dynamics
• Excel (advanced)
• Word (advanced)
• ServiceNow / JIRA

• Strong attention to detail
• Ability to work under tight timelines
• Proactive approach to identifying issues

Exposure to end-to-end audit lifecycle and opportunity to work across diverse industries and ERP systems.