Manager, IT Internal Controls

THE ROLE

This role is focused on evaluating and reviewing IT General Controls (ITGCs) and providing assessments for critical IT areas such as Segregation of Duties (SOD), Access Management, Role Review, and Application Control at the design level. He / She should have a strong understanding of internal controls, access management processes, risk management, and control design frameworks, and will be responsible for ensuring that the organization’s IT systems meet regulatory and compliance requirements.

REPORTING STRUCTURE

Functional Team : IT General Controls, Risk & Internal Control Head

Base Location : GBSI – Mumbai OR Chennai

PURPOSE

The Purpose is to review and evaluate the IT General Controls (ITGCs) and providing assessments for critical IT areas such as Segregation of Duties (SOD), Access Management, Role Review, and Application Control at the design level. They play a crucial role in defining the access control framework, change management control for the varied application that are being used by the organization and instill better governance and internal control from IT applications standpoint.

KEY RESPONSIBILITIES

1) Segregation of Duties (SOD) Review :

• Perform detailed SOD analysis and testing to ensure proper segregation of duties in key business processes.
• Identify potential conflicts in user access roles and recommend corrective actions to mitigate risks related to unauthorized access or fraudulent activities.
• Conduct SOD assessments at the design level, analyzing roles, permissions, and access configurations to confirm compliance with the organization’s internal policies and external regulations.

2) Access Review and Management :

3) Role Review and Role Design :

4) Application Control Review :

5) General IT Control and Risk Assessment :

6) Reporting and Documentation :

QUALIFICATION & CERTIFICATIONS