Research EXL before you apply
Check ratings, real-employee reviews, verified pay, and interview difficulty.
We are seeking an experienced ITGC Consultant with strong expertise in designing, implementing, and operationalizing IT General Controls (ITGCs) across ERP and business application environments. The ideal candidate will have hands-on experience implementing control frameworks for NetSuite, Microsoft Navision (Dynamics NAV), and Sage ERP platforms, supporting SOX compliance, risk management, post-acquisition integrations, and audit readiness initiatives.
The role requires a combination of IT risk, controls implementation, process improvement, stakeholder management, and ERP controls experience to help clients establish sustainable and effective control environments. Relevant experience with ITGC and SoD implementations across ERP platforms is highly desirable.
Responsibilities
Lead ITGC assessments covering: User Access Management; Change Management; IT Operations, Backup & Recovery; Interface Monitoring; Privileged Access Management
Design and implement ITGC frameworks across ERP applications including: NetSuite; Microsoft Navision (Dynamics NAV); Sage ERP; Conduct control walkthroughs and gap assessments to identify deficiencies and remediation requirements.
Develop and enhance: Risk & Control Matrices (RCMs); Control Narratives; Standard Operating Procedures (SOPs); Control Evidence Requirements; Support Segregation of Duties (SoD) assessments, conflict analysis, and remediation activities; Work with business and IT stakeholders to implement sustainable control solutions and governance processes; Execute control remediation programs and validate remediation effectiveness; Support SOX readiness, external audits, internal audits, and compliance initiatives; Facilitate workshops with application owners, business process owners, and IT teams; Provide training and knowledge transfer to client teams on control operation and compliance requirements.
Qualifications
Master's degree in Information Systems, Computer Science or related discipline.
6 to 12 years of experience in: ITGC; SOX Compliance; IT Risk & Controls; Internal Audit; ERP Controls Implementation.
Demonstrated experience implementing IT controls within: NetSuite; Microsoft Navision (Dynamics NAV); Sage ERP
Strong understanding of: SOX 404; COBIT; ITGC Frameworks; Risk Management Principles
Experience developing and implementing: Access Controls; Role Design; Change Management Controls; IT Operations Controls; Automated and Manual Controls; Excellent stakeholder management and communication skills.