Systems Software Senior Engineer

Job Summary

The candidate should have hands-on experience in internal audits, process audits, IT General Controls (ITGC), and internal control concepts, including the COSO Framework and the Sarbanes-Oxley Act (SOX), with specific exposure to Oracle ERP change management and access controls, and experience working with GRC/access-governance tools such as SafePaas. They should be comfortable operating in complex, multi-country Oracle environments and be able to translate technical system configurations into control language that auditors and business stakeholders can act on. The role involves leading or supporting a team on internal control testing and remediation, collaborating with control owners, IT, and both internal and external auditors (e.g., PwC, Internal Audit) to address complex control gaps, and driving issues to root-cause resolution. The candidate should be able to independently manage deliverables, evidence requests, and status reporting against audit timelines, essentially thinking like an auditor even while sitting on the process/control side.

During a Typical Day, You'll

•Apply Internal Audit / Process Audit concepts and methodology to evaluate control design and operating effectiveness

•Work within the COSO Framework to assess processes, sub-processes, and activities and how they interrelate

•Support Sarbanes-Oxley Act (SOX) compliance activities across ITGC and process-level (business process) controls

•Apply internal control concepts (Preventive, Detective, Anti-fraud, etc.) in the context of Oracle Financials and HRMS environments

•Review, test, and monitor Oracle change management controls — including change requests, approvals, testing evidence, and segregation of duties (SoD) within the change lifecycle

•Configure, monitor, or interpret SafePaas control reports (e.g., SoD conflicts, sensitive access, configurable controls) and translate findings into remediation actions

•Support access management controls, including user access reviews, provisioning/deprovisioning, and self-approval/independence checks (e.g., Supervisor and Functional Owner level reviews)

•Be comfortable working within an Internal Controls (IC) model, either as an individual contributor or leading a team of Specialists/Associates

•Collaborate with control owners, IT teams, and business stakeholders on complex assessment issues to develop practical, risk-based recommendations

•Coordinate directly with external auditors (e.g., PwC) and Internal Audit on evidence requests, walkthroughs, testing samples, and issue resolution — ensuring responses are complete, accurate, and delivered on time

•Document findings and draft management responses that address root cause and business impact, not just the symptom

•Think like an auditor: proactively identify control gaps, anticipate audit questions, and challenge process design before an external party does

•Assist with timely completion of tasks, development of deliverables, and status reporting to management and audit stakeholders

What You Bring to the Role

•6+ years of experience in SOX compliance, internal controls, or IT audit, with direct exposure to ERP (Oracle preferred) environments

•Practical experience with Oracle change management processes and controls (change request lifecycle, approvals, testing, deployment)

•Experience with SafePaas or similar GRC/access-governance/SoD tools is strongly preferred

•Working knowledge of ITGC domains: access management, change management, and computer operations

•Experience coordinating with external audit firms and/or internal audit teams on evidence requests and control testing

•Experience managing audit evidence and workflows through SharePoint (uploads, tracking, version control for supporting documentation)

•Strong written and verbal communication skills — able to draft clear, audit-ready responses and explain technical control issues to non-technical stakeholders

•Analytical mindset with the ability to identify root cause, assess risk, and recommend practical remediation

•A completed degree is required (Accounting, Finance, IT, or related field preferred; CIA, CISA, or CPA a plus)

•Comfortable operating across multiple countries/regions and time zones given the global scope of the control environment

What You Can Expect