Internal Compliance IT Expert

Internal Compliance IT Expert

Job Title : Internal Compliance IT Expert

Job Description:

PURPOSE OF THE JOB:

Reporting to the Head-IT Quality & Compliance he/she leads internal compliance activities and contributes to the promotion and application of the internal controls within the IS/T processes and operations. He/she facilitates and collaborates with the IS&T contributors for internal/external audits and for the governance of IS&T processes.

Organization structure (job belongs to..)

Digital Services/Quality and Compliance

Reports directly to:

Head-IT Quality & Compliance

Direct reports: None

MAIN RESPONSABILITIES:

Internal/External Audit:

• Provide support to internal teams on IT internal/external audit.
• Conduct ITGC audits for IT service partners of Alstom in lieu of SOC 1 Type II reports.
• Assist IS&T Operational teams and units to design Action plans and monitor their progress.
• Assist in the Monitoring and communication of audit planification within IS&T organization.
• Escalating and managing compliance issues where required.
• Actively engage with internal and external auditors to ensure consideration and resolution of all relevant risks and audit findings.
• Provides audit information to management by researching and analyzing data.
• Develops a high-quality report of the audit findings open action plans and shares with management.

Internal Control:

• Design and review the IT internal controls and animate campaigns across IS&T organization.
• Define and execute controls in order to ensure compliance with key points.
• Identify and launch initiatives to improve compliance.
• Collaborate with internal teams to create update and implement compliance policies procedures and protocols.
• Work collaboratively with multiple teams spread across geographies and process owners to implement and monitor remediation efforts that result from internal control assessments ensuring the effective implementation of corrective action.

Process Management

• Provide guidance and assist process owners in drafting policy standards work instructions and other process documents.
• Guide Process owners in defining and driving action plans related to process adoption or gaps identified during process quality checks.
• Conduct awareness sessions / promotional sessions on key audit topics related processes for IS&T teams.

MAIN REQUIRED COMPETENCES:

Mandatory:

Bachelors degree in Computer Science IT business management or related field is required. An advanced degree is preferred.

At least 10 to 12 years of experience in Internal Control/Internal Audit in IT ecosystem and hands-on experience on ITIL processes

Preferred certifications ISO 9001 Lead auditor CISA certification desirable.

Competencies & Skills:

Technical:

Good background of IT organizations (ITIL processes IT outsourced delivery model SIAM / MSI)

Good understanding and knowledge of business risks related to IT system general controls systems / applications development change management logical access security network contingency and recovery.

Ability to understand process flows challenge the set up and identify weaknesses.

Knowledge of COBIT library and Process assessments / framework CISA certification desirable.

Knowledge of policies and procedures related to ITGC SOC CISA certification desirable.

Behavioral:

Detail oriented with excellent analytical and organizational skills.

Interpret policies procedures and compliance requirement.

Establish and maintain effective relationships with various teams

Excellent presentation interpersonal and organization skills.

Excellent writing / editing and verbal communication skills

Fast learner with the ability to balance multiple priorities and meet deadlines.

Organized inquisitive innovative problem solvers with the ability to perceive understand and interpret facts quickly and precisely.

Fluent in English work with autonomy in an international and matrix environment and to face the challenges of the new Alstom

.