IT Risk, Audit And Compliance - Internal Control Lead (ICFR IT)

Square One Resources is recruiting for an experienced ICFR Lead to join their Security, Quality & Compliance team. The role focuses on IT Audit, IT Risk, Internal Controls, and Compliance within large international organizations or consulting firms, especially related to SAP system compliance.

• 10+ years of experience in IT Audit, IT Risk, Internal Controls, or IT Compliance within large international organizations or consulting firms.
• Strong experience with IT General Controls (ITGC) and Internal Control over Financial Reporting (ICFR).
• Deep understanding of SAP security and access management, including SAP GRC or similar tools.
• Experience supporting internal and external IT audits.
• Knowledge of IT Change Management, Access Management, and IT Operations controls.
• Ability to translate complex technical and compliance requirements into clear guidance for technical and non-technical stakeholders.
• Excellent communication, stakeholder management, and relationship-building skills.
• Strong analytical thinking, problem-solving, and decision-making abilities.
• Bachelor's degree in Informatics, Business Administration, or a related field; a Master's degree is an advantage.

Nice to have:

• Experience working in highly regulated industries such as healthcare, pharmaceuticals, or life sciences.
• Professional certifications such as CISA, CRISC, CIA, or similar.
• Experience driving control automation and continuous improvement initiatives.
• Experience working in global, multicultural environments.

• Advise IT Management on IT risks impacting financial reporting and support compliance with ICFR requirements.
• Design, implement, and continuously improve IT General Controls (ITGCs) and related monitoring processes.
• Support onboarding of new systems and control owners by providing guidance and training on risk and control requirements.
• Partner with IT Management, system owners, and support teams to ensure effective implementation of control procedures.
• Act as the main point of contact between IT teams and external/internal auditors during IT audit activities.
• Support audit preparation, coordinate evidence collection, and ensure timely delivery of high-quality audit documentation.
• Identify control gaps, recommend remediation actions, and monitor implementation progress.
• Prepare periodic reports on control effectiveness, testing results, and remediation status for management.
• Drive initiatives to simplify, standardize, and automate control activities and monitoring processes.
• Collaborate with cross-functional stakeholders, including IT Security, Risk Management, Internal Audit, and business teams.