Reporting to the Head-IT Quality & Compliance, he/she leads internal compliance activities and contributes to the promotion and application of the internal controls within the IS/T processes and operations. He/she facilitates and collaborates with the IS&T contributors for internal/external audits and for the governance of IS&T processes.
Organization structure (job belongs to..)
Digital Services/Quality and Compliance
Reports directly to:
Head-IT Quality & Compliance
Direct reports: None
MAIN RESPONSABILITIES:
Internal/External Audit:
Provide support to internal teams on IT internal/external audit.
Conduct ITGC audits for IT service partners of Alstom in lieu of SOC 1 Type II reports.
Assist IS&T Operational teams and units to design Action plans and monitor their progress.
Assist in the Monitoring and communication of audit planification within IS&T organization.
Escalating and managing compliance issues where required.
Actively engage with internal and external auditors to ensure consideration and resolution of all relevant risks and audit findings.
Provides audit information to management by researching and analyzing data.
Develops a high-quality report of the audit findings, open action plans and shares with management.
Internal Control:
Design and review the IT internal controls and animate campaigns across IS&T organization.
Define and execute controls in order to ensure compliance with key points.
Identify and launch initiatives to improve compliance.
Collaborate with internal teams to create, update, and implement compliance policies, procedures, and protocols.
Work collaboratively with multiple teams spread across geographies and process owners to implement and monitor remediation efforts that result from internal control assessments, ensuring the effective implementation of corrective action.
Process Management
Provide guidance and assist process owners in drafting policy, standards, work instructions and other process documents.
Guide Process owners in defining and driving action plans related to process adoption or gaps identified during process quality checks.
Conduct awareness sessions / promotional sessions on key audit topics, related processes for IS&T teams.
MAIN REQUIRED COMPETENCES:
Mandatory:
Bachelor's degree in Computer Science, IT, business, management, or related field is required. An advanced degree is preferred.
At least 10 to 12 years of experience in Internal Control/Internal Audit in IT ecosystem and hands-on experience on ITIL processes
Preferred certifications ISO 9001 Lead auditor, CISA certification desirable.
Competencies & Skills:
Technical:
Good background of IT organizations (ITIL processes, IT outsourced delivery model, SIAM / MSI)
Good understanding and knowledge of business risks related to IT system general controls, systems / applications development, change management, logical access security, network, contingency, and recovery.
Ability to understand process flows, challenge the set up and identify weaknesses.
Knowledge of COBIT library and Process assessments / framework, CISA certification desirable.
Knowledge of policies and procedures related to ITGC, SOC, CISA certification desirable.
Behavioral:
Detail oriented with excellent analytical and organizational skills.
Interpret policies, procedures, and compliance requirement.
Establish and maintain effective relationships with various teams
Excellent presentation, interpersonal and organization skills.
Excellent writing / editing and verbal communication skills
Fast learner with the ability to balance multiple priorities and meet deadlines.
Organized, inquisitive, innovative problem solvers with the ability to perceive, understand and interpret facts quickly and precisely.
Fluent in English, work with autonomy in an international and matrix environment and to face the challenges of the new Alstom