IT Compliance/SOX Assessor

Job Description: Manager - QA Project/Process Quality Manager L2
Job Title: Control Maturity Lead Assessor
Work Location: Prague

*Conduct IGM Control Maturity Assessment based on priority through classification and on new assets.
*Manage and reports on Control Maturity Assessment which are assigned to him/her.
*Take responsibility for the optimal execution of Control Maturity Assessments.
*Ensures that IGM related processes for compliance and security are followed in line with the classification of the assets.
*Ensures that appropriate process documentation is available and current.
*Align with all stakeholders during the process of assessment.
*Reviews opportunities for process, quality and security enhancements with the local IT Head and business partners in an open way.
*Follows the IGM Policy Framework and integrate the assessment outcome into the information risk management. Communicates the Control Maturity requirements with Global IT function and Country IT management through the IGM managers upfront and agree on the Control Maturity assessment timelines and deliverables
*Stays current about control assessment tools, trends, best practices and methods and integrates this into the Control Maturity assessment practices.
*Optimizes the balance of internal and managed service deliverables in one overall consolidated reporting per unit or function.
*Be able in grouping logically all asset assessments in a representable report for the related unit or function

Education
*University bachelor level degree in business/technical/scientific/communication area or comparable education/experience
*Professional (information system) risk or audit certification such as CISA or CRISC, ISO 27001 auditor

Experience
*Over 5 years of professional experience of which at least two in a similar or related checker role, and at least 2 in an operational guidance, implementation and/or remediation doer role in view of compliance related requirements
*Excellent communication skills
*Experience with SOX IT compliance requirements.
*Experience with GxP/CSV/e-compliance requirements in an IT context.
*Understanding of general privacy requirements in an IT context.

Language
*Fluency (written and spoken) in English