IT Compliance Analyst

Job Description

We are looking for a motivated IT Compliance Analyst to support our IT Governance Risk and Compliance framework focusing on IT General Controls (SOX) SAP authorization governance Segregation of Duties (SoD) user access management and audit support. The role involves close collaboration with IT teams SAP specialists business owners and auditors to ensure IT controls are properly designed documented tested and improved. An excellent opportunity for professionals experienced in IT compliance audit risk management or SAP security.

Key Responsibilities

• Maintain and improve documentation for IT controls policies risk assessments and compliance activities.
• Support design testing and enhancement of ITGCs (access change management IT operations and monitoring).Perform control testing identifying gaps risks and process weaknesses.
• Support remediation plans and prepare reports and evidence for audits.
• Contribute to IT risk assessments and mitigation actions.
• Promote compliance awareness across IT and business teams and support automation of compliance processes access reviews and monitoring.
• Use and evaluate GRC tools for access governance SoD analysis and reporting.
• Improve access recertification privileged access monitoring and documentation.
• Apply frameworks such as ITIL ISO 27001 SOX/ITGC and internal control standards.
• Support SAP authorization governance (roles provisioning workflows access reviews).Collaborate with SAP teams to ensure least privilege principle and prepare SAP audit documentation using tools such as PFCG SU01 and SUIM.
• Monitor joiner/mover/leaver processes privileged and emergency access.
• Analyze SoD conflicts and support mitigation actions.

Requirements

• Degree in IT Computer Science Business Administration Engineering or related field.
• 35 years of experience in IT compliance audit risk management internal controls or SAP security.
• Good knowledge of ITGCs audit methodologies and control testing.
• Understanding of SoD and authorization risk analysis.
• Knowledge of IAM change/incident management and IT operations.
• Familiarity with ITIL ISO 27001 SOX or similar frameworks.
• Experience with SAP authorizations roles and user administration.
• Strong analytical documentation and communication skills; detail-oriented and well-organized.

Niceto Have

• Certifications (CISA CRISC ISO 27001 SAP Security/GRC).
• Experience with Pathlock or similar tools.
• Background in multinational or manufacturing environments.
• Knowledge of compliance requirements for listed companies.
• Experience in audit remediation or IT control improvement projects.

WHAT YOU CAN EXPECT
At CFT we are committed to ensuring equal employment opportunities and a fair inclusive recruitment process. Candidates are evaluated without any form of discrimination in full respect of diversity and applicable line with our commitment to transparency for this role we offer:

• Contract: Permanent
• Applicable collective agreement: CCNL Metalmeccanica Industria
• Compensation: expected salary rangegross per year (RAL) defined in accordance with the Metalmeccanica Industria Collective Agreement. The actual amount will be determined based on professional experience skills and assigned job level.
• Benefits: Smart Working corporate welfare and dedicated training.
• Full-time position in Italy with hybrid availability outside standard hours and travel depending on business or audit needs.

Additional Information