ICFR Lead & Risk Manager (SAP GRC)

About the project

Support the design, implementation, and continuous improvement of IT controls within SAP environments. Collaborate closely with IT and business stakeholders in a global organization. Work on global compliance and governance initiatives within a large international organization. This is how we work on a project, documentation, issue tracking tools, technical debt management.

Your responsibilities

• Advise IT Management on IT risks related to financial reporting and ensure compliance with Internal Control over Financial Reporting (ICFR) requirements.
• Design, implement, and continuously improve IT General Controls (ITGC) and related monitoring processes.
• Support IT Change Management, Access Management, and IT Operations control frameworks.
• Onboard new systems and control owners, providing guidance on control requirements and best practices.
• Partner with internal and external auditors, coordinate audit activities, and ensure timely delivery of high-quality audit evidence.
• Support remediation activities by working with IT Management to address control gaps and monitor action plans.
• Prepare management reports on testing results, remediation progress, and control effectiveness.
• Identify opportunities to simplify, standardize, and automate control activities while embedding ICFR requirements into new tools and processes.
• Collaborate with global stakeholders across IT, Security, Risk, Compliance, and Audit functions.

Experience and qualifications

• 10+ years of experience in IT Audit, IT Risk, Internal Controls, IT Compliance, or a similar consulting role with a strong focus on IT General Controls (ITGC).
• Hands-on experience with SAP Access Management and tools such as SAP GRC.
• Strong understanding of ICFR/SOX requirements and IT control frameworks.
• Experience supporting internal and external IT audits.
• Ability to explain complex technical and compliance requirements to non-technical stakeholders.
• Excellent stakeholder management, communication, and relationship-building skills.
• Bachelor's degree in Informatics, Business Administration, or a related field (Master's degree is an advantage).

Benefits

• Sharing the costs of sports activities
• Private medical care

Recruitment stages

One interview process with technical verification