GRC Analyst
We are looking for a GRC Analyst who will join the Information Security Team and help us make the world a better place through innovation, which means we’re taking risks and questioning conventional thinking, and developing new technologies and ways of doing business – leading the way, every single day.
- Enjoy doing things that people say can’t be done? Innovation is at the center of everything we do.
- Hate red tape? We remove roadblocks instead of creating them.
- Looking for community? There are many ways to get involved, from Employee Resource Groups to local outreach.
- Lead the IT SOX program, including design, implementation, and monitoring of ITGCs and ITACs.
- Perform proactive deficiency identification, remediation, and process improvements prior to scheduled audits.
- Train IT control owners on SOX compliance and support adoption of automated audit processes (e.g., AuditBoard).
- Partner with internal audit, finance, IT, and external auditors to evaluate risks, perform walkthroughs, and implement remediation strategies.
- Manage Segregation of Duties (SOD) program, including periodic monitoring, access reduction, and risk remediation.
- Conduct IT risk assessments, including cyber risk reviews, ransomware readiness, and system implementation audits.
- Identify and implement opportunities for automation and streamlining of controls to enhance efficiency.
- Develop and present IT SOX compliance reports to executive management and external stakeholders.
- Lead, mentor, and develop a team of IT compliance professionals.
- Bachelor’s Degree in Information Technology, Computer Engineering or related field
- Minimum of 5 years’ experience in IT audit, information security, IT risk management, SOX or technical privacy
- Strong knowledge of ITGCs, ITACs, SOX requirements, and audit methodology.
- Proven success in collaborating across IT, finance, and audit functions.
- Proven experience with control monitoring principles and practices leveraging technical and operational best practices to define the security controls and processes.
- Demonstrated ability performing IT Risk & Security assessments across a broad range of technologies including evaluating internal controls and performing technical analysis.
- Excellent written and verbal communication and presentation skills that can be applied to all levels of management.
- Ability to work independently and collaboratively to achieve business outcomes.
- Information Security related training or certifications such as CISSP, CISM, CISA.
- Hands-on experience with ERP systems (SAP S/4 Hana, Oracle EBS) and SaaS.
- Experience with AuditBoard or other GRC tools.
- Experience with automation tools
- Understanding of manufacturing or semiconductor operations
- Competitive Salary
- Performance based bonus plan
- Flexible working environment
- 25 days annual leave plus 10 public holidays
- Pension Plan
- Full benefits package including private medical insurance
- A fun, inclusive working environment providing fantastic learning and development programs designed to enable individuals to achieve career goals and grow with the company
- And a lot more!