IT SOX & SAP IT Controls Contractor - 100% Remote - 6 Months Contract

Description

The contractor will support Information Security & Risk Management (ISRM), Finance Compliance, technical teams, and internal/external audit partners in maintaining an effective and audit-ready IT SOX control environment for SAP-enabled financial processes. The role requires the ability to understand SAP financial processes conceptually and translate business and technical risks into practical IT General Controls (ITGCs).

Key Responsibilities

• Partner with ISRM, Finance Compliance, application owners, and technical teams to assess IT SOX impacts across SAP financial processes and supporting applications.
• Translate SAP financial process and technology concepts into appropriately designed ITGCs covering access management, change management, security configuration, interfaces, and related automated controls.
• Develop, update, and review risk and control matrices, control descriptions, process narratives, data flows, interface inventories, test procedures, and evidence requirements.
• Evaluate control design and operating effectiveness; identify gaps, recommend practical remediation, and track issues through closure.
• Support control owners with audit readiness, walkthroughs, evidence collection, testing requests, and responses to internal and external auditors.
• Coordinate across Finance, Technology, ISRM, and Audit to resolve control questions, align ownership and handoffs, and communicate status, risks, and decisions clearly.
• Help standardize, simplify, and automate controls where feasible without reducing SOX effectiveness.

Required Qualifications

• Bachelor’s degree in Information Technology, Accounting, Finance, or a related field.
• Strong knowledge of IT SOX, SOX Section 404, ITrisk and control principles, and audit evidence standards.
• Conceptual understanding of SAP Financials and end-to-end finance processes, including how financial data, configurations, roles, changes, and interfaces affect financial reporting.
• Hands-on experience designing, documenting, evaluating, or testing access, change, security configuration, and interface controls in an SAP or similarly complex environment.
• Ability to interpret technical designs and explain control requirements to both technical and nontechnical stakeholders.
• Strong analytical, documentation, project coordination, and professional communication skills; able to work independently and manage multiple audit-driven priorities.

Preferred Qualifications

8+ years of relevant IT audit, IT controls, compliance, or SAP risk experience; public-company or Big Four experience; CISA, CPA, CISSP, or equivalent certification; familiarity with SAP S/4HANA, GRC, BTP/integration technologies, continuous controls monitoring, and audit workflow tools.