Snr IT Control SAP Advisor (m/f/d)

We are currently looking for Senior IT Audit Controlling Consultant (m/f/d) -SAP for our energy client

Start: 13.02.23
End: 29.03.24
Volume: fulltime
Location: remote

Project description:
In 2023 a number of changes are impacting our SAP area. As a consequence of change in the ownership structure of the client and even stronger emphasis on the Internal Controls, in this respect by updating existing ones and introducing new IC controls into the SAP ecosystem. The goal is to adjust to all these changes.

Currently the project is planned for a period mid/end February 2023 until end of March 2024. Due to the complex and dynamic situation of the client, the duration of the project may exceed this plan or further adjustments to the scope (e.g. new IC controls) may be introduced. Such changes would either conform with the scope of this JP or a CR to this JP would be raised.

Task (performed independently):
- Advisory on extraction of so called “populations” for the needs of external IC Audit (auditor
currently is PwC company)
- Evaluating and providing action-recommendations in case of “audit findings” to Hiring manager and
AC Leader.
- Advisory on integration of new controls into the SAP area, meaning process adjustments as well as
technical implementations. (The implementation itself is intended to be delivered by an
independent external supplier.)
- Review of Audit related processes and consultation to SAP Stakeholders (Application managers,
Security team etc.) on the IC relevant aspects of auditing SAP ecosystem.
- Monitoring and continuously evaluating accesses to HANA DB, Oracle DB and SAP (ERP, BI, ISU)
systems. In case of findings (unauthorised access, access of user bypassing the Internal Auth.
change process), forward this to the Leader of Access Control team.
- Document and upload all the activities and outcomes above on the Client s AC SharePoint for
approval by the Hiring manager (or delegate).
- Provide the above mentioned based on own expertise as well as best practice available on the market / internet / SAP information repository, being it IC / IT Controls, SAP technology and SAP security (authorisation) management.
- Appear clearly as an external consultant of the client whenever interacting with external parties.

Skills:
- Senior Experience with IT Audits / IT Controls
- Experience with SAP Best practices
- SAP authorisation experience nice-to-have
- Experience in reviewing Audit results/ actions from IT / SAP
System applicability and recommending solutions


The client provides all necessary information, access to the systems and requirements in advance.

Michael Bailey International is acting as an Employment Business in relation to this vacancy.