Senior Internal Auditor

Senior Internal Auditor - ERP Assurance

Role: Senior Internal Auditor - ERP Assurance
Location: Dubai, United Arab Emirates
Industry: Management Consulting
Function: Accounting/Auditing
Experience: Strong Oracle Fusion Cloud ERP audit and post-implementation review experience
Job Type: Full-time

Position Overview

Senior Internal Auditor - ERP Assurance in Dubai, United Arab Emirates is a specialized Management Consulting opportunity for an experienced audit professional to deliver a risk-based Post-Implementation Review of an Oracle Fusion Cloud ERP implementation. The role will independently evaluate ERP governance, Financials, Procurement, HCM, application controls, security, IT general controls, integrations, data migration, and post-deployment performance to determine whether the implementation is operating effectively and achieving its intended objectives.

Job Details

Country: United Arab Emirates
City: Dubai
Industry: Management Consulting
Function: Accounting/Auditing
Salary: 20000-30000 Estimated salary range based on similar jobs in the job city; please confirm the final offer with the employer.
Gender: Any
Candidate Nationality: Any
Job Type: Full-time

Role Context

Working on a secondment basis, the Senior Internal Auditor will provide an independent assessment of the control environment established following the Oracle Fusion Cloud ERP implementation. The assignment bridges internal audit, technology assurance, business-process controls, and ERP governance. Findings will give management greater visibility into residual risks, control deficiencies, implementation effectiveness, and the corrective actions required to strengthen the platform.

Key Responsibilities

• Establish the scope and risk priorities for the Oracle Fusion Cloud ERP Post-Implementation Review.
• Develop an audit work program covering governance, business processes, application controls, security, and IT risks.
• Conduct fieldwork, walkthroughs, control testing, evidence assessment, documentation, and reporting.
• Examine Oracle Fusion Financials processes and determine whether key financial controls are appropriately designed and operating.
• Review Procurement workflows, purchasing controls, three-way matching, approvals, and associated configurations.
• Assess relevant Oracle Fusion HCM processes and controls.
• Test approval workflows for appropriate authorization levels, routing logic, and configuration.
• Evaluate master data creation, modification, approval, ownership, and monitoring controls.
• Review financial close processes and assess the effectiveness of supporting system configurations.
• Examine user provisioning, access amendments, de-provisioning, and periodic access certification.
• Assess role architecture and segregation of duties for incompatible or excessive access combinations.
• Review sensitive and privileged access and determine whether compensating controls adequately mitigate identified risks.
• Evaluate IT general controls covering access administration, change management, and system governance.
• Assess controls governing Oracle quarterly releases, including impact assessment, testing, approval, and production deployment.
• Review interfaces between Oracle Fusion and connected applications for completeness, accuracy, and appropriate monitoring.
• Examine relevant SOC reports and determine whether applicable Complementary User Entity Controls are implemented effectively.
• Assess data migration governance, validation, reconciliation, completeness, and accuracy.
• Test integration monitoring, exception reporting, failed transactions, and error-handling procedures.
• Evaluate whether post-implementation monitoring provides sufficient visibility into system and interface issues.
• Assess user adoption against the intended implementation objectives and operating model.
• Review training effectiveness, support arrangements, escalation procedures, and ongoing user assistance.
• Evaluate service-level agreements and determine whether post-implementation support expectations are being achieved.
• Review Oracle licensing utilization to identify potential inefficiencies or underused entitlements.
• Document audit evidence, testing results, exceptions, conclusions, and supporting rationale to professional standards.
• Identify control deficiencies and determine their root causes and potential business impact.
• Assign risk ratings according to the severity, likelihood, and significance of identified issues.
• Develop practical recommendations with clear remediation priorities and accountable actions.
• Produce a prioritized remediation roadmap addressing immediate, medium-term, and structural control improvements.
• Present concise audit co