Salesforce ITGC Audit & Control Testing Specialist

Role : Salesforce ITGC Audit & Control Testing Specialist

Location : Pune / Nagpur (On-site)

Job type : Full Time Job

Shift : 8 AM–5 PM EST

Job Description :

Experience : 5+ Years

We are hiring Salesforce ITGC Audit Specialists with strong experience in Salesforce security, audits, and control testing . Candidates should independently handle ITGC testing, data extraction, and audit evidence preparation across multiple Salesforce instances.

Key Responsibilities :

Perform Salesforce SDLC phase control testing (migration plan, UAT, security approvals, data migration).

Conduct ITGC controls testing across Logical Security, Change Management, and IT Operations.

Handle user provisioning / deprovisioning , access reviews, admin access, emergency access, and security parameter checks.

Validate change processes, development / debug access, infrastructure monitoring, incident / problem management, and server patching.

Execute data extraction, audit queries, and evidence collection .

Requirements :

Minimum 5 years in Salesforce security audits / ITGC testing.

Strong knowledge of Salesforce audit processes.

Excellent communication; able to work independently.

Key Responsibilities

1. Salesforce SDLC Phase Controls Testing (Approx. 5 Controls)

Evaluate System Migration Plans (Project Charter)

Validate User Acceptance Testing (UAT) Approvals

Review Data Migration Approvals

Assess System Migration Security Approvals

Verify Data Migration Go-Live Approvals

2. Salesforce ITGC Controls Testing (Approx. 30 Controls across 2 instances)

Logical Security Controls

User Provisioning (creation / change)

User De-provisioning

User Access Reviews

Authentication & Security Parameter Validation

Access to Security Parameters

Default Account Management

Admin Access Controls

Emergency Access Handling

Change Management Controls

Change Process Compliance

Change Settings Review

Development Access

Debug Access

Computer & Network Operations Controls

Infrastructure Monitoring

Problem & Incident Management

Network Security & Server Patching Validation

3. ITGC Queries, Data Extraction & Evidence Collection (Approx. 12 Controls)

Extract and validate audit-relevant data

Prepare evidence for internal and external auditors

Provide clarifications and respond to audit queries