IT Controls & Compliance Manager
我们正在寻找一个 IT 控制和合规管理员，以在我们的 IPO 之前实施 SOX 合规计划的一部分。你将是确保我们财务报告的数据完整性和安全的关键人 通过工程，安全和金融来设计和运营 IT 总监管 (ITGC).这是一个广泛的高影响作用。你将有真正的席位并在桌子上并有机会构建一些有意义的事情。等待你的挑战：·识别和评估业务流程风险 ·设计和实现 ITGC 和 ITAC 对 SOX 合法的控制 （IT 组件）·与工程和安全团队合作评估控制效率并弥补缺口 ·支持内部和外部审计，协调证据收集，管理发现 ·随着功能的增长而努力实现多个合规框架 （PCI DSS,NIST CSF,ISO 27001,等）·在多个运营管辖区中为 BCP/DRP 计划做出贡献 ·不断改善 IT 安全流程和控制环境 让你非常适合：· 5年以上 IT 审计，IT 风险，IT 合规或信息安全方面的经验 ·对 SOX （IT 组件）,ITGC,ITAC 的实践知识强大 ·了解云基础设施及其相关风险景观 ·了解数据管理流程和信息完整性 ·知识基础信息安全流程 ·灵活性与所有权思维方式 你将建立，不仅保持尼斯拥有：·在上市或 IPO 前公司的行业经验 ·金融部门监管文档 （关于 IT 和信息安全）的知识和工作经验 ·认证：CISA,CRISC 或类似语言 · B2或更高水平的英语以有效地沟通国际团队的工作方法 ·高度适应优先事项变化，同时保持审计质量，范围和完整性 · 展现出了弹性，专业判断力和对压力和复杂性的高容忍 我们的工作方式：·创新精神：致力于创造力和开创性解决方案 ·诚实反意见：重视公开透明沟通 ·支持团队：强大协作社区 ·庆祝成就：共同承认我们的胜利 · 高科技环境：一个由智能和革命性的人组成的团队，他们可以从一开始就有机会获得成功。
查看英文原文
We are looking for an IT Controls & Compliance Manager to implement IT controls as part of our SOX compliance program ahead of our IPO. You will be the key person ensuring the integrity and security of data that underpins our financial reporting — working across engineering, security, and finance to design and operationalize IT General Controls (ITGC).
This is a broad, high-impact role. You will have a real seat at the table and the opportunity to build something meaningful.
Challenges that await you:
- Identification and Assessment of Business Process Risks
- Design and implement ITGC and ITAC controls for SOX compliance (IT component)
- Collaborate with engineering and security teams to assess control effectiveness and remediate gaps
- Support internal and external audits, coordinate evidence collection, manage findings
- Work towards multiple compliance frameworks as the function grows (PCI DSS, NIST CSF, ISO 27001, etc.)
- Contribute to BCP/DRP planning across multiple operational jurisdictions
- Continuously improve IT security processes and control environments
What makes you a great fit:
- 5+ years of experience in IT audit, IT risk, IT compliance, or Information Security
- Strong hands-on knowledge of SOX (IT component), ITGC, ITAC
- Understanding of cloud infrastructure and its associated risk landscape
- Understanding data management processes and information integrity
- Knowledge of the fundamentals of information security processes
- Flexibility and ownership mindset — you will be building, not just maintaining
Nice to have:
- Industry experience at a publicly traded or pre-IPO company
- Knowledge of and experience working with regulatory documentation in the financial sector (regarding IT and information security)
- Certifications: CISA, CRISC or similar
Language
- B2 or higher English level for effective communication with an international team
Work approach
- Highly adaptable to changes in priorities, while maintaining the quality, scope, and integrity of the audit
- Demonstrated resilience, professional judgment, and high tolerance for pressure and complexity
Our ways of working:
- Innovative Spirit: A commitment to creativity and groundbreaking solutions
- Honest Feedback: valuing open, transparent communication
- Supportive Team: a strong, collaborative community
- Celebrating Achievements: recognizing our wins together
- High-Tech Environment: a team full of smart and revolutionary people who date to challenge the status quo of incumbent finances
Our benefits:
- Relocation support to Cyprus, Georgia, Serbia — with assistance for the employee and their family
- Flexible work from one of our offices or remote
- HealthcareCoverage
- Education Budget: Language lessons, professional training and certifications
- Wellness Budget: Mental health and fitness activity reimbursements
- Vacation policy: 20 days of annual leave and paid sick leave
Originally posted on Himalayas