Staff Internal Controls

Job Description

- Ensures the effectiveness of IT controls in compliance with corporate objectives and government standards such as the Sarbanes-Oxley Act (SOX) or the 8th Company Law Directive.
- Strategic IT Audit Planning: Develop and execute a comprehensive IT audit strategy for ITGC and ITAC aligned with the organizations technology goals and emerging risks.
- Advanced ITGC and ITAC Audits: Lead and execute high-complexity IT audits, assessing controls, evaluating risk management strategies, and identify opportunities to enhance IT processes and security measures.
- Typically performs one or more of the following in capacity of either an individual contributor (as directed and/or independently):
- Ensures the effectiveness of IT controls in compliance with corporate objectives and government standards such as the Sarbanes-Oxley Act (SOX) or the 8th Company Law Directive
- Reviews, evaluates, develops, implements, maintains and verifies IT controls for key systems in accordance with internal auditing and government-mandated standards
- Identifies internal control gaps in systems and initiates appropriate remedial action.
- Supports the coordination of external IT audits by auditors. Ensuring a continuous improvement process within the organization including communication and training measures.
- Ensures that documentation for all processes across the organization is reviewed and updated periodically.
- Needs to coordinate with external auditors to prepare the attestation of management assessment on internal controls in accordance with Section 404 of the Sarbanes-Oxley Act
- Responsibilities are within the IT Controllership Function as a generalist or in a combination of Disciplines.
- Ensures transparent reporting to IT Senior Management
- Work and collaborate on other projects and/or assignments as needed.
- See description for career level for general proficiency levels pertaining to Job Complexity, Accountability, Relationship Focus, and Knowledge, Skills Abilities. These proficiency levels apply to all career levels. Some requirements may vary locally.
- Stakeholder Engagement: Establish and nurture relationships with senior management, technology leaders, and key stakeholders. Collaborate to provide insights into IT governance, risk management, and cybersecurity practices.
- Technology Risk Management: Evaluate and provide recommendations to mitigate technology-related risks, including cybersecurity, data privacy, and compliance with relevant regulations.
- Policies and Procedures: Contribute to the development and refinement of IT audit policies, procedures, and frameworks.

Required Qualifications:

- Completed university degree in Computer Science/Information technology, business, accounting; preferably CISA certified.
- Professional experience as an (IT) auditor: with Big 4 experience an advantage
- 8+ years of professional experience.
- Profound knowledge of internal control frameworks (ITGC, ITAC), methodologies, and best practices.
- Knowledge in SAP S4/HANA
- Proficiency in control management software and related tools.
- Very good knowledge of Microsoft Excel is essential.
- Relevant experience working in international environments.
- Exceptional analytical skills and problem-solving abilities.
- Strong interpersonal and communication skills for clear articulation of complex concepts.
- Demonstrated leadership, strategic vision, and innovative thinking.
- Flexibility in working with Globally located team.
- English: business fluent
- Results-oriented professional with strong cross-functional thinking, confident presence, and effective leadership skills