Bachelor's degree in Business Administration, Management Information Systems, Computer Science, Cybersecurity, Accounting or a related field
CISA or the ability to obtain within a year is required
8-12+ years of progressive experience in technology risk, IT audit, IT compliance, technology controls, and/or privacy risk and regulatory compliance within complex, global organizations
Deep expertise in COSO and NIST frameworks (and familiarity with privacy/security standards such as ISO 27001/27701 and common privacy control concepts), including performing audit procedures against standards or assessing and implementing controls
Strong knowledge of IT general and automated controls, ICFR concepts, and control design/testing, plus the ability to translate privacy regulatory obligations (e.g., GDPR, DPDP, PIPL, CCPA/CPRA) into practical, testable technology and process controls
Prior experience with SAP (ECC, BW, GRC, ECP, S/4HANA) and understanding configuration and best practices
Demonstrated experience supporting or overseeing SDLC activities and system implementations
Experience evaluating third-party service providers SOC reports
Experience with control automation, continuous controls monitoring, and continuous improvement
Proven ability to operate effectively in a global, matrixed organization
Effective and impactful executive-level communication and presentation skills; able to influence outcomes and drive decisions across IT, Security, Legal/Privacy, Finance, and the business
Strong judgment and risk prioritization capabilities
Ability to influence without authority
Pragmatic, business-oriented approach to compliance
Continuous improvement mindset