SAP IT Auditor

Who We Are

At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward – always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.

The Role

An exciting opportunity to join Kyndryl’s SAP IT Auditor team has opened up! This role can be performed remotely so if you live in any of the following regions: US, UK, Canada, India, Germany, Spain, Netherlands, Costa Rica, etc, please apply.

We are looking for a strong IT Systems/Applications Auditor to join Kyndryl’s General Auditor Organization (GAO) to conduct internal IT systems and application audits as well as systems pre-implementation reviews in support of the Kyndryl's internal controls, policies and procedures, operations goals and objectives. This position will be responsible for supporting the execution of IT application audits and systems pre-implementation reviews in line with established working practices and work programs.

• Performs independent assessment of IT

• Conduct and assist in all phases of the review/audit, including, but not limited to, planning and scoping activities, identification and evaluation of risks, evaluation of efficiency and effectiveness of processes, systems, and controls, recommending improvements for applications used internally in Kyndryl

• Assess complex IT systems, environments, and controls, including but not limited to, applications, operation systems, databases, network, infrastructure, different platforms, on prem and cloud, SaaS, PaaS, IT controls and processes

• Conduct review/audit of SAP solutions

• Conduct review/audit globally including all Kyndryl geographical locations

• Provide strong analytical and critical thinking skills to identify root cause of issues and develop recommendations to improve security posture

• Analyze complex problems/issues, anticipate potential risks and impacts. Develop and recommend solutions

• Demonstrate clear and effective verbal, written and oral communication skills to report out on audit status and/or issues to Kyndryl leadership and other stakeholder

• Support special projects around internal control and process improvements; and other projects as assigned

• Maintain current on new business initiatives, system implementations, personnel changes and acquisitions

• Maintain up to date knowledge of Internal Audit and IT SOX compliance guidelines, interpretations and standards

Kyndryl currently does not require employees to be fully vaccinated against COVID-19, however, if you are hired to work at a client, customer, or partner location, you may be required to show proof of vaccination to align with their respective COVID-19 vaccination policies.  Those who believe they are eligible may apply for a medical or religious accommodation prior to the start of employment.

Who You Are

Required Technical and Professional Expertise

• Minimum of 5 years of direct experience related to IT audits, IT reviews or risk management

• Possesses at least one of the following certifications: CIA, CISA, CISSP, CISM, or other equivalent certification

• Strong knowledge of IT audit, ITGC, IT SOX program, internal controls, compliance, IT application controls, cyber security and data privacy regulations, laws, and standards.

• Strong knowledge of enterprise resource planning (ERP) systems, especially having strong SAP technical skills

• Experience in reviewing and testing of SAP S4 HANA and other SAP applications’ (e.g. GRC, MDG, BW) IT general controls (ITGC) for key domains such as access management, change management, computer operations, System Development Life Cycle (SDLC)

• Strong knowledge and understanding of the SAP TCode, tables used to extract the data from SAP applications with relation to ITGC and IT application controls (ITAC) testing, user access security architecture (e.g. Roles, profiles, Authorization objects)

• Strong knowledge and understanding of IT controls and processes (e.g. system management, access management, control points and associated procedures, separation of duties, data security and privacy, disaster recovery, audit trails, testing and data migration process)

  <