Specialist ERP Assurance at Sasol

Purpose of Job

• Provide first line (operational) assurance to the SAP ERP and Automation Platform teams (Hereafter referred to as “This Environment”) by verifying that IT General controls including SOX controls are properly designed and operating effectively across this environment including interfacing systems. The role designs and performs control monitoring, reviews testing, gathers evidence and reports objective outcomes against Sasol's IT Critical application controls for this environment and its related policies/standards enabling timely remediation and demonstrable compliance. This role is positioned within this environment to drive governance, control monitoring and ensure overall compliance (including with Sarbanes Oxley and Internal Audit requirements). 
• SAP ERP – Will refer to the Sasol ERP on premise and Cloud hosted systems in its entire  scope.
• Automation Platform – Will refer to all other hosted and supported 3rd party applications such as SharePoint, ServiceNow, MuleSoft and various other applications or solutions.

Key Accountabilities
Control design assurance

• Validate control design against internal environment standards and policies (e.g., Segregation of Duty and Access and Authorisation), raising design gaps and concessions where needed.
• Translate enterprise control objectives into testable control statements and SOPs for first line checks across this environment.
• Translate Internal Audit / Assurance Services audit findings into testable control statements and SOP’s for first line checks across this environment.
• Embed doer–checker separation for high-risk activities; ensure evidence trails meet internal and external assurance expectations.

Operating effectiveness & continuous monitoring

• Review the execution of control tests (periodic and continuous), 
• Operate configuration/compliance scans and related health checks to detect baseline drift and control exceptions.
• Review Preventative and detective control coverage and ensure adequate risk mitigation

Evidence, reporting & governance

• Ensure completeness and accuracy of  auditable evidence for each control
• Produce clear monthly assurance reports highlighting control status, exceptions, risks, and remediation progress for IM leadership and Combined Assurance forums.

Issue/exception handling and risk response

• Drive remediation tracking with control owners; log and monitor risk responses and concessions per the Sasol and SOX Risk Response process.
• Support SOX/ITGC sustainment by aligning first-line checks to key environment controls and collating compensating-control evidence where needed.

Stakeholder collaboration (2nd/3rd line)

• Partner with GRC/Compliance (2nd line) and Internal Audit (3rd line) to share first-line results, close findings, and reduce repeat issues via design improvements and SOP updates.

Formal Education and Certification

• 3–4 year relevant degree (Information Systems  / Computer Science / Risk / Audit) or equivalent experience.

Certifications (one or more advantageous): SAP Certified Associate certification in one or more of the following areas:

• SAP S/4HANA (e.g., Finance, Sales, Procurement)
• SAP Business Technology Platform (BTP)
• SAP SuccessFactors (HR)
• SAP Ariba (Procurement)
• SAP Analytics Cloud
• SAP ABAP (development)
• SAP Certified Technology Associate in one or more of the following areas:
• SAP Certified Technology Associate – SAP S/4HANA System Administration
• SAP Certified Technology Associate – SAP HANA 2.0 (SPS05)
• SAP Certified Technology Associate – SAP NetWeaver
• SAP Certified Technology Associate – SAP Business Technology Platform (BTP)
• Governance/Standards: ISO/IEC 27001 Lead Implementer/Lead Auditor
• SOX compliance certifications

Working Experience

• 6+ years in SAP ERP operations or control monitoring/assurance across IT Systems / SAP ERP platforms with an advantage of having any other associated experience in Automation or Managed service platforms such as ServiceNow, MuleSoft etc.

Technical Skill
Frameworks/Controls: 

• SAP GRC Access Control
• SAP Solution Manager
• SAP Audit Information System (AIS)
• Change & Configuration Management; configuration baseline drift detection and evidence capture 
• Strong understanding of COSO, COBIT, ITGCs, and control frameworks.