SAP IT Audit Consultant

• Is industry experience needed for this role and why?: CPG Industry

1. Audit Skills
2. Working with BIG 4 in IT Audit in SAP

POSITION OVERVIEW: Seeking an experienced SAP Security Subject Matter Advisor (SMA) to lead the evaluation, integration, and alignment of application security requirements across SAP platforms. The ideal candidate will bridge technical architecture with strict SOX compliance and audit standards to ensure robust risk management within a Consumer Packaged Goods (CPG) environment.

DAY-TO-DAY RESPONSIBILITIES

Review and integrate end-to-end application security requirements and technical architectures across SAP platforms.

Evaluate and enforce SOX compliance controls and SAP business process controls.

Collaborate with cross-functional teams to align application security architectures with business drivers and risk frameworks.

Provide expert guidance and final recommendations regarding overall application security decisions.

Conduct and support internal/external IT security audit procedures to identify and remediate control gaps.

Interface with stakeholders to ensure security architectures meet CPG industry compliance and operational goals.

REQUIRED SKILLS

IT Security Controls on SAP Platform (8 10 years)

SOX Audit & Compliance Controls (8 10 years)

SAP Business Process Controls (8 10 years)

ADDITIONAL DESIRED SKILLS

IT Audit / Big 4 Consulting experience in SAP environments

CPG (Consumer Packaged Goods) Industry Experience

Advanced Application Security Architecture knowledge

CANDIDATE PROFILE

An authoritative, detail-oriented SAP Security Advisor with a strong background in IT audit and business process controls. The ideal profile combines deep hands-on expertise in SAP platform security with a rigorous approach to SOX compliance, ideally honed in Big 4 or large-scale enterprise CPG environments.

Job Responsibilities

Review, design, and integrate application security requirements for SAP platforms.

Oversee and optimize SOX IT controls and SAP business process controls.

Partner with technical and business teams to evaluate risk, support audits, and ensure compliance.

Provide actionable insights and recommendations on application security architecture.