Senior Manager-ITGC Internal Audit

Manager/Senior Manager - ITGC (IT General Controls)
DAMAC Shared Services, Noida, India

The Manager/Senior Manager – ITGC leads the design, testing and reporting of IT General Controls in support of the Group's SOX / ICFR compliance programme. The role owns the ITGC scope across in-scope applications, infrastructure and IT processes - covering access management, change management, computer operations and program development and works closely with IT, Applications and Security teams to ensure controls are appropriately designed, evidenced and operating effectively.

Key Responsibilities

• Define and maintain the annual ITGC scope, including in-scope applications, supporting infrastructure, interfaces and IT processes relevant to financial reporting.
• Plan and execute ITGC walkthroughs and testing across the four core domains: Access Management, Change Management, Computer Operations (including backups and batch processing), and Program Development/Acquisition.
• Assess automated/application controls, system-generated reports (Information Produced by Entity – IPE) and interface controls for completeness and accuracy.
• Coordinate with IT Infrastructure, Applications and Information Security teams to obtain evidence, system configurations and access listings required for testing.
• Identify control gaps and deficiencies, assess root cause and severity, and work with IT process owners to define and agree practical remediation plans.
• Track remediation progress and perform re-testing of remediated controls ahead of quarterly/annual certification.
• Act as the day-to-day point of contact for External/Statutory Auditors on ITGC-related queries and evidence requests.
• Prepare periodic ITGC status reports and dashboards for the VP – SOX and Finance Audits, highlighting key risks and open items.
• Support the assessment and onboarding of new systems, ERP modules or infrastructure changes (including M&A integrations) into the SOX/ITGC scope.
• Review and mentor the work of ITGC team members, graduate/associate auditors and co-source resources.

• Contribute to the continuous improvement of ITGC testing methodology, templates and use of automation/analytics.

Qualifications & Experience

• Certified Information Systems Auditor (CISA) preferred; CISSP, CIA or equivalent certification is an advantage.

• Bachelor's degree in Information Technology, Computer Science, Accounting or a related field.

• Manager: 8–12 years, Senior Manager: 10–14 years of relevant experience in IT audit, ITGC or IT risk & controls, including SOX-specific experience gained with a Big 4 firm and/or a large corporate internal audit function.

• Hands-on experience reviewing security and access controls within major ERP environments (SAP and/or Oracle) is required.

Knowledge, Skills & Competencies

• Strong working knowledge of ITGC frameworks and leading practices (COBIT, ISO 27001) as applied to a SOX/ICFR context.

• Solid understanding of ERP security models (SAP GRC / Oracle Cloud Security), database and operating-system level controls, and cloud infrastructure controls.

• Ability to translate technical IT findings into business risk language for financial and non-technical stakeholders.

• Strong analytical and report-writing skills, with attention to detail and evidence-based conclusions.

• Good stakeholder management and communication skills across IT, Finance and external audit teams.