Experience with control automation, continuous controls monitoring, and continuous improvement
Deep expertise in COSO and NIST frameworks (and familiarity with privacy/security standards such as ISO 27001/27701 and common privacy control concepts), including performing audit procedures against standards or assessing and implementing controls
Bachelor's degree in Business Administration, Management Information Systems, Computer Science, Cybersecurity, Accounting or a related field
Strong knowledge of IT general and automated controls, ICFR concepts, and control design/testing, plus the ability to translate privacy regulatory obligations (e.g., GDPR, DPDP, PIPL, CCPA/CPRA) into practical, testable technology and process controls
Ability to influence without authority
Strong judgment and risk prioritization capabilities
Experience evaluating third-party service providers SOC reports
Demonstrated experience supporting or overseeing SDLC activities and system implementations
Continuous improvement mindset
Effective and impactful executive-level communication and presentation skills; able to influence outcomes and drive decisions across IT, Security, Legal/Privacy, Finance, and the business
Pragmatic, business-oriented approach to compliance
8-12+ years of progressive experience in technology risk, IT audit, IT compliance, technology controls, and/or privacy risk and regulatory compliance within complex, global organizations
CISA or the ability to obtain within a year is required
Prior experience with SAP (ECC, BW, GRC, ECP, S/4HANA) and understanding configuration and best practices
Proven ability to operate effectively in a global, matrixed organization

SmartExplore AI is experimental.

Apply Directly