Salesforce ITGC Audit

Role: Salesforce ITGC Audit & Control Testing Specialist Location: Pune/Nagpur (On-site)Job type: Full Time JobShift: 8 AM–5 PM ESTJob Description:Experience: 5+ YearsWe are hiring Salesforce ITGC Audit Specialists with strong experience in Salesforce security, audits, and control testing. Candidates should independently handle ITGC testing, data extraction, and audit evidence preparation across multiple Salesforce instances.Key Responsibilities:Perform Salesforce SDLC phase control testing (migration plan, UAT, security approvals, data migration).Conduct ITGC controls testing across Logical Security, Change Management, and IT Operations.Handle user provisioning/deprovisioning, access reviews, admin access, emergency access, and security parameter checks.Validate change processes, development/debug access, infrastructure monitoring, incident/problem management, and server patching.Execute data extraction, audit queries, and evidence collection.Requirements:Minimum 5 years in Salesforce security audits/ITGC testing.Strong knowledge of Salesforce audit processes.Excellent communication; able to work independently. Key Responsibilities1. Salesforce SDLC Phase Controls Testing (Approx. 5 Controls)Evaluate System Migration Plans (Project Charter)Validate User Acceptance Testing (UAT) ApprovalsReview Data Migration ApprovalsAssess System Migration Security ApprovalsVerify Data Migration Go-Live Approvals2. Salesforce ITGC Controls Testing (Approx. 30 Controls across 2 instances)Logical Security ControlsUser Provisioning (creation/change)User De-provisioningUser Access ReviewsAuthentication & Security Parameter ValidationAccess to Security ParametersDefault Account ManagementAdmin Access ControlsEmergency Access HandlingChange Management ControlsChange Process ComplianceChange Settings ReviewDevelopment AccessDebug AccessComputer & Network Operations ControlsInfrastructure MonitoringProblem & Incident ManagementNetwork Security & Server Patching Validation3. ITGC Queries, Data Extraction & Evidence Collection (Approx. 12 Controls)Extract and validate audit-relevant dataPrepare evidence for internal and external auditorsProvide clarifications and respond to audit queries