IT Audit and Risk Consultant (SOX Compliance & Digital Platforms)

We are seeking an IT Audit and Risk Consultant (SOX Compliance & Digital Platforms) to join our critical project on a 12-month contract. There is potential for extension or conversion to a permanent position based on the candidate's performance.

Experience:

• 3+ years of IT audit or risk consulting experience with a primary focus on testing ITGC and ITAC in accordance with SOX requirement in high-transaction volume environments
• Knowledge of auditing digital product platforms, microservices architecture, and API-based workflows is highly desirable.
• Proven ability to independently execute all phases of ITGC and ITAC testing.
• Understanding of real-time transactional systems and high-availability environments.
• Familiarity with digital product platforms, microservices architecture, and API-based workflows.
• Experience auditing controls over customer-facing applications, payment integrations, and mobile/web platforms.

Key Responsibilities:

• Perform detailed testing of IT General Controls (ITGC) and IT Application Controls (ITAC) in accordance with SOX requirements.
• Perform detailed testing and evaluation of controls relevant to SOC reports.
• Execute detailed testing of ITGC in accordance with SOX:
• Access Management including multi-factor authentication, segregation of duties, provisioning/deprovisioning across diverse identity platforms, and management of privileged access using e.g Cyberark, CommonFate
• Change Management (CI/CD pipelines, DevOps, Agile environments)
• Computer Operations (cloud infrastructure, backup, incident management, and especially batch job monitoring process)
• Conduct thorough testing of ITACs in transactional systems, such as:
• Booking platforms (e.g., reservation engines)
• Revenue recognition systems and related data integration
• Payment gateways and fraud detection logic
• Customer data management and loyalty program applications
• Apply knowledge of auditing cloud-based infrastructure (AWS, GCP, Azure) and SaaS-based platforms (e.g., Salesforce, Oracle Cloud, Workday)

Argyll Scott Consulting Pte Ltd