EXPERIENCE AND SKILLS REQUIREMENTS:

• Knowledge and deep experience in Sarbanes-Oxley Act of 2002 (SOX) control requirements, ISO/27001, National Institute of Standards and Technology (NIST), and Payment Card Industry (PCI) frameworks and regulations.
• Experience in developing and executing IT risk assessments aligned to industry standards such as NIST and ISO/27001.
• Intermediate to advanced background in SAP internal controls and GRC platforms.
• Experience in executing and evaluating service auditor reports (ex. SOC1/SOC2).
• Ability to effectively lead projects while executing detailed tasks.
• Strong time and document management skills with a attention to detail.
• Strong communication skills in presenting IT internal controls and risk matters in a consumable manner across various forums and levels of the organization.
• Ability to work independently in developing methodologies, programs, work plans and communications relating to IT risk and compliance.
• Willing and able to travel (up to 20%) including International.
• Ability to maintain a flexible work schedule (able to meet the requirements of the position as needed including ability to work evenings and weekends when necessary).
• Five - seven years of IT risk and controls experience with a similar position in a multinational, SEC-registerd company or delivering similar services via a professional services firm.
• Credentials including: Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC) and Certified Internal Auditor (CIA) preferred.