> Markdown version of [/jobs/ext/4569854-cyber-sap-internal-controls-senior-consultant-senior-engineering-management-specialist](https://www.wearedevelopers.com/jobs/ext/4569854-cyber-sap-internal-controls-senior-consultant-senior-engineering-management-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber SAP Internal Controls Senior Consultant/ Senior Engineering Management Specialist

- **Company:** Deloitte T.T.L.
- **Location:** United States
- **Experience:** Expert
- **Salary:** $105,400 - $207,800
- **Contract:** Permanent contract
- **Skills:** Cloud Computing, Cyber Security, Information Systems, Identity and Access Management, Information Technology Operations, SAP ERP, SuccessFactors, SAP (Applications), Secure Coding, Software Security, SAP Ariba
- **Published:** November 4, 2026
- **Apply:** https://apply.deloitte.com/en_US/careers/Login?jobId=373992

## About the Role

* Ability to work independently and collaborate as part of a team
 * Effective written and verbal communication skills
 * Meticulous attention to detail and quality of work product
 * Ability to build and sustain professional relationships
 * Ability to lead workstreams and train/develop junior team members
 * Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
 * Ability to meet deadlines
 * Ability to provide clear guidance to others, Required:
 * Bachelor's degree in accounting, information systems, business, or a related field
 * 3+ years of experience designing and implementing internal controls (automated, manual controls) in an SAP ERP environment

 * 2+ years of experience with key business processes (e.g., record to report, procure to pay, order to cash, etc.) and their inherent risks and controls

 * Experience evaluating SAP ERP configuration and translating business requirements into automated control designs; able to explain the configuration and control logic for at least 2 control examples.
 * Experience assessing risks and controls in at least 2 IT general control domains, such as access management, change management, or IT operations.
 * 2+ years of experience with segregation of duties frameworks and mitigating controls

 * 2+ years' experience applying SOX or comparable regulatory requirements to SAP ERP controls, including supporting control documentation, testing, or remediation

 * Ability to travel 50%, on average, based on the clients and industries/sectors you serve
 * Limited immigration sponsorship may be available

Preferred:

 * Experience with SAP ERP implementations or transformations
 * Experience with automated solutions for continuous control monitoring, access management, cloud governance, etc. (e.g., SAP Process Control, SAP Identity Access Governance)
 * Experience with controls for SAP ERP Cloud applications (e.g., SuccessFactors, Ariba, Concur, Business Technology Platform, etc.)
 * Experience with pre-go live control testing, audit support, or compliance programs
 * Professional certifications such as CPA, CISA, CIA, CRISC, or SAP certifications
 * Experience working in consulting or professional services environments

## Description

As a Senior Consultant on the Cyber Enterprise Security team, you will:

 * Identify risks within the client's business processes and technical environment, and impacts to the client's current state risk and controls framework, based on the scope of the transformation / implementation project
 * Work with business/functional and technical teams to understand SAP configurations and custom development, and translate risks into control requirements
 * Design automated and manual business process controls and IT general controls to manage the risks identified
 * Design and develop controls for AI-enabled business processes and help shape AI governance programs
 * Lead workshops with client stakeholders to align on risks and control design

 * Analyze segregation of duties risks and critical/sensitive functions and define mitigating controls as necessary

 * Coordinate testing of the designed controls and review testing evidence to validate the control design effectiveness
 * Apply clients' regulatory environment (e.g., Sarbanes Oxley (SOX)) to controls design and testing
 * Transition and conduct knowledge transfer to control owners and relevant stakeholders
 * Facilitate discussions with internal audit and compliance stakeholders as needed
 * Collaborate with client stakeholders, business/functional teams, and technical teams on controls governance and deployment readiness
 * Develop deliverables and work products, such as risk and control matrices, control test procedures, control job aids, control impact assessments, or other controls documentation