Salesforce ITGC Audit & Control Testing Specialist
Location : Pune / Nagpur (On-site)
Shift : 8 AM–5 PM EST | Start Date : 8 Dec 2025
Type : 1 Full-Time + 1 Contract
Experience : 5+ Years
no of positions : 2 (1 Full-Time + 1 Contract)
Job Summary :
We are hiring Salesforce ITGC Audit Specialists with strong experience in Salesforce security, audits, and control testing. Candidates should independently handle ITGC testing, data extraction, and audit evidence preparation across multiple Salesforce instances.
Key Responsibilities :
- Perform Salesforce SDLC phase control testing (migration plan, UAT, security approvals, data migration).
- Conduct ITGC controls testing across Logical Security, Change Management, and IT Operations.
- Handle user provisioning / deprovisioning, access reviews, admin access, emergency access, and security parameter checks.
- Validate change processes, development / debug access, infrastructure monitoring, incident / problem management, and server patching.
- Execute data extraction, audit queries, and evidence collection.
Requirements :
Minimum 5 years in Salesforce security audits / ITGC testing.Strong knowledge of Salesforce audit processes.Excellent communication; able to work independently.Key Responsibilities :
1. Salesforce SDLC Phase Controls Testing (Approx. 5 Controls)
Evaluate System Migration Plans (Project Charter)Validate User Acceptance Testing (UAT) ApprovalsReview Data Migration ApprovalsAssess System Migration Security ApprovalsVerify Data Migration Go-Live Approvals2. Salesforce ITGC Controls Testing (Approx. 30 Controls across 2 instances)
Logical Security Controls
User Provisioning (creation / change)User De-provisioningUser Access ReviewsAuthentication & Security Parameter ValidationAccess to Security ParametersDefault Account ManagementAdmin Access ControlsEmergency Access HandlingChange Management Controls
Change Process ComplianceChange Settings ReviewDevelopment AccessDebug AccessComputer & Network Operations Controls
Infrastructure MonitoringProblem & Incident ManagementNetwork Security & Server Patching Validation3. ITGC Queries, Data Extraction & Evidence Collection (Approx. 12 Controls)
Extract and validate audit-relevant dataPrepare evidence for internal and external auditorsProvide clarifications and respond to audit queries