Role : Salesforce ITGC Audit & Control Testing Specialist
Location : Pune / Nagpur (On-site)
Job type : Full Time Job
Shift : 8 AM–5 PM EST
Job Description :
Experience : 5+ Years
We are hiring Salesforce ITGC Audit Specialists with strong experience in Salesforce security, audits, and control testing . Candidates should independently handle ITGC testing, data extraction, and audit evidence preparation across multiple Salesforce instances.
Key Responsibilities :
- Perform Salesforce SDLC phase control testing (migration plan, UAT, security approvals, data migration).
- Conduct ITGC controls testing across Logical Security, Change Management, and IT Operations.
- Handle user provisioning / deprovisioning , access reviews, admin access, emergency access, and security parameter checks.
- Validate change processes, development / debug access, infrastructure monitoring, incident / problem management, and server patching.
- Execute data extraction, audit queries, and evidence collection .
Requirements :
Minimum 5 years in Salesforce security audits / ITGC testing.Strong knowledge of Salesforce audit processes.Excellent communication; able to work independently.Key Responsibilities
1. Salesforce SDLC Phase Controls Testing (Approx. 5 Controls)
Evaluate System Migration Plans (Project Charter)Validate User Acceptance Testing (UAT) ApprovalsReview Data Migration ApprovalsAssess System Migration Security ApprovalsVerify Data Migration Go-Live Approvals2. Salesforce ITGC Controls Testing (Approx. 30 Controls across 2 instances)
Logical Security Controls
User Provisioning (creation / change)User De-provisioningUser Access ReviewsAuthentication & Security Parameter ValidationAccess to Security ParametersDefault Account ManagementAdmin Access ControlsEmergency Access HandlingChange Management Controls
Change Process ComplianceChange Settings ReviewDevelopment AccessDebug AccessComputer & Network Operations Controls
Infrastructure MonitoringProblem & Incident ManagementNetwork Security & Server Patching Validation3. ITGC Queries, Data Extraction & Evidence Collection (Approx. 12 Controls)
Extract and validate audit-relevant dataPrepare evidence for internal and external auditorsProvide clarifications and respond to audit queries