Lead - SOX and Compliance Controls

Responsibilities:

• The Access Process Lead for SOX Controls plays a critical role within the Service Governance and Excellence Office at GCC.
• Accountable and responsible for guaranteeing the correct and timely execution of internal access management control reviews (approx. 100+) and for ensuring their quality before validation by appropriate control owners.
• Responsible for reviewing access management procedures every year by challenging control owners and/or advising on overall process design before the new SOX cycle.
• Responsible for managing a team of 4 to 5 people that will frequently execute control execution reviews.
• Responsible for identifying process weaknesses and improvements in access management areas by ensuring that risk analysis is conducted with an appropriate action plan and action owner defined.
• Provide his expertise as a previous auditor (if applicable) during audit execution by challenging findings or audit conclusions made by internal or external auditors before audit closing.
• Accountable for implementing and maintaining the respective tools (i. e., audit board, SharePoint planner, etc. ) for ALL-audit and SOX-related actions and to assign them in the tool to the respective calendar due dates (recurring in some cases) and responsible persons.
• Responsible for promoting and controlling that all GCC resources are getting training certifications on compliance topics (e. g., ITGC); in that perspective, he/she will organize complementary compliance trainings or lessons learned sessions that will contribute to improving the overall or specific maturity level of the GCC/Europe teams.
• Responsible for building and maintaining the inventory per application within his area of SOX-control owners, control reviewers, and control executors. He/she is also in charge of identifying and escalating to the respective SOX officer and application owners the availability of at least a primary and backup resource per item at any time.
• The Access Process Lead will be connected to all IT teams (based in India at the GCC or in Europe), will report to the Segment IT SOX Officer, and is a member of the Service Governance and Excellence Office at the GCC.

Requirements:

• 6-8 years of relevant experience as an IT auditor (if possible, as an internal auditor).
• Strong Knowledge of SAP Security and Authorizations.
• A background in IT engineering is a plus.
• Strong knowledge of ITGC/ITAC and GDPR.
• Knowledge of application/tool: SAP GRC, SAP IG, Pathlock, CSI AA, or SailPoint ARM.
• Project and Access management skills.
• Excellent understanding of IT applications, architecture, and systems.
• Excellent communication skills and the ability to propose dashboards, allowing the visualization of complex environments in a simple representation, highlighting key points requiring leadership attention.
• Assertiveness and ability to coordinate multicultural and multi-site teams of different levels.
• Excellent communication, negotiation, networking, and listening skills.
• Strategic mindset and problem-solving skills.
• Analytical mindset and creativity to seek and encourage innovation.
• Strong customer-oriented mindset and a real sense of emergency.