ITGC External Auditor Conduct external audits of ITGC controls to assess compliance with regulatory requirements and industry standards. Evaluate ITGCs in the SAP environment, focusing on access management, change management, and system configurations. Review SAP implementation processes to ensure alignment with financial control frameworks and regulatory compliance. Assess user provisioning, access management, and segregation of duties (SoD) across SAP instances. Identify control deficiencies, report audit findings to stakeholders, and provide recommendations for remediation. Verify the effectiveness of remediation actions taken for control issues raised during SOX audits. Perform independent testing of SAP ITGCs, including Test of Design (TOD) and Test of Effectiveness (TOE). Assess operational effectiveness of SAP security controls, including user access and change management. Conduct ITGC and configuration controls testing across various business units and industries. Evaluate user authorization processes and policies to identify security risks and compliance gaps. Review and validate user authorizations, profiles, and role assignments for compliance. Analyze SAP role design and segregation of duties (SoD) controls to identify risks and conflicts..