Senior IT Auditor - ITGC / SAP
First seen by Alion on Aug 17, 2026.
Role Overview:
We are looking for an experienced Senior IT Auditor - ITGC / SAP / CISA with strong experience in IT Audit, Internal Controls and Risk Assurance, along with exposure to SAP/ERP environments.
The role will involve assessing IT and business process controls, identifying technology and process risks, and working with global stakeholders to strengthen governance, compliance and control effectiveness across enterprise systems.
Key Responsibilities:
- Lead IT and Internal Audit engagements across technology and business environments.
- Assess IT General Controls (ITGC) and IT Application Controls (ITAC) including access, change management, system operations and automated controls.
- Review controls across SAP/ERP and related business processes, including Procurement, MM, Inventory, Sales, AP/AR and P2P.
- Evaluate risks and controls around SAP/ERP systems from an audit and governance perspective.
- Prepare and review Risk & Control Matrices (RCM/RACM), audit procedures and testing documentation.
- Conduct control testing, identify gaps, and support remediation and closure of audit findings.
- Support SOX / internal controls / compliance assessments where applicable.
- Participate in audit planning, execution, reporting and follow-up.
- Work closely with global IT, business and process owners across multiple geographies.
- Communicate audit findings and recommendations effectively to senior stakeholders.
- Support continuous improvement of audit methodologies and control frameworks.
- Use data analytics where applicable to improve audit testing and identify control/risk trends.
Mandatory Requirements:
- 10+ years of experience in IT Audit, Internal Audit, Technology Risk, Risk Assurance or Internal Controls.
- Strong hands-on experience in ITGC and/or ITAC testing.
- Experience with SOX, internal controls, risk assessment or control testing.
- Exposure to SAP/ERP environments and related business process controls.
- Strong understanding of RCM/RACM, audit testing and remediation.
- CISA certification.
- Experience working with global/multi-region stakeholders.
- Strong communication, stakeholder management and audit reporting skills.
- Experience with Big 4 / Risk Advisory / Internal Audit / Global Capability Centre environments is preferred.
Good to Have:
- SAP GRC / SAP Security / SAP controls exposure.
- Experience with SAP MM, SD, Procurement, Inventory or Finance-related processes.
- Experience with SOX / ICFR / automated controls.
- Exposure to audit analytics or data-driven testing.
Skills
IT Audit, CISA, IT Controls, IT Risk Management