Conducting Internal Audits for SAP ITGC Controls performed inside the Compliance and risk management team.Execution and review of ITGC controlso Execution of ITGC controls on monthly and quarterly basiso Review of other ITGC controls to prevent SODo Follow-up to remediate the deviationDeliver and provide status in monthly and quarterly dashboards to clientEnsuring that IT Application Security Compliance is maintained throughout the application lifecycle for the suite of applications used across the enterprise.Assessing IT General Controls (ITGC) in the Information Technology environment, application controls, computer operations, program development, program changes and find gaps.Reporting issues or deficiencies found during testing and escalating issues identified as result of control failures to the control owner/Manager.Ensuring results are recorded in applicable tracking systems.Follow-up with IT teams to close out the open audit observations.Conducting walkthroughs, updating & documenting process flow-charts and narratives. Identified risks, implemented, and tested IT General Controls and reported issues to the IT Controller.Reviewing Logical Access Management, Change Management, Logical Security of SAP Applications, Governance Controls, Backup & Restoration and Policies & Procedures.Worked on assessing the effectiveness of ITGC Controls across: New User Account, Terminated Users, Privileged Access and Change Management.

Assist in the preparation of audit documents as part of the audit teamWorked on logical access, change management and operational controlsPerformed internal audit quarterly and yearly basis and shared the audit work papers to audit manager for review.Reviewed automated controls and manual controls and prepared clear work papers that support the work performed and conclusionsShare results with the audited location or function and get buy-in to remedial management actionCompletes basic quality review checks on dataLogical access control taken samples for User provisioning, user access review, password policy, privilege access and presented audit findings to the manager.Prepared detailed reports on audit findings, analyse and verify annual reportsCreation/modification of Composite/ Single/Master/Derived roles as per business requirement.Worked with technical and business analysts to develop SAP roles, profiles and authorizationsWorked on User Administration activities such as creation of User ID (SU01), Mass User Creation(SU10), creation of support User IDs with excess authorizations & assign to Technical Support Users as per approvals.Worked on helpdesk tickets for authorization issues and user ID creation requests.Supported SAP Security Administration & Authorization including role maintenance, profile generator (PFCG).Resolving tickets on authorization issues, logon failures, Password reset.Creating/modifying/deleting Activity groups (Roles) in R/3 system.Preparing various reports using AGR and USR tables.