IT Compliance Manager

About us:Ferrovial is one of the world's leading infrastructure operators, committed to developing sustainable solutions. Our company operates in more than 15 countries and has a workforce of over 24,000 professionals worldwide. Ferrovial is listed simultaneously on 3 stock markets: USA (Nasdaq), the Netherlands (Euronext Amsterdam), and Spain (IBEX 35), and is a member of the Dow Jones Sustainability Index and FTSE4Good.The aim of Ferrovial Corporation is to design the Company's strategy, establishing global policies, guidelines and action guides related to the different functional areas of the Organization (Internal Audit, Finance, Human Resources, Legal, IT, Innovation, etc.), which subsequently are developed and adapted to the specificities of each Business Unit. Additionally, it performs a function of providing corporate services to the different companies of the group, while consolidating its information.Job Description:Mission:In Ferrovial we are always looking for high-skilled professionals. At this stage, in this area we are looking for Program Managers with multidisciplinary skills, technical background and strong experience in leading and managing IT Transformation/Innovation Programs orchestrating multiple dimensions and stakeholders and requiring a strong alignment with the technical teams.Additionally, in the current context, Ferrovial is facing a historical and challenging milestone listed in the US Stock Exchange Market and for that is enhancing its internal control system for SOX compliance, covering also all the supervision of all IT Compliance activities in coordination with the Corporate Compliance and Audit area.The Manager will assist in supervision of the audit staff and be responsible for managing planning and completion of assurance and advisory engagements. They will assist in supervision of the SOX program implementation and be responsible for oversight of the outsourced assurance providers' progress to ensure timely completion of agreed upon deliverables.Responsibilities:SOX TasksManage and follow-up the overall SOX IT implementation and operation plan in Ferrovial at a global level including the different companies and business units in scope.Define and lead an e2e governance model to coordinate the key stakeholders (IT areas, Business, Audit and Compliance).Oversee the definition and maintenance of Risks & Controls Matrix, Flowcharts and Narratives for all the applications in the scope. This includes: ITGCs and IT processes, ITACs, IPEs.Oversee definition, implementation and follow up of remediation plans for all the elements in scope (ITGCs, ITACs & IPEs) resulting from the different audit processes, as well as changes in the organization, IT environments, etc.Manage the process to keep the GRC tool up to date in terms of ITGCs, ITACs, IPEs, applications and other SOX key assets.Define and deploy criteria to determine whether an application is in-scope and application onboarding/offboarding processes.Perform risks assessments in applications to identify key and non-key controls.Report to SOX Governing Bodies. Define and elaborate KGIs and KPIs in coordination with financial department, internal audit and IT.Contribute to internal digitalization and the automation of SOX related processes such as generation of documents, evidence, reports, action plans, etc. with the adoption of specific technologies.Identify opportunities to increase efficiency and/or reduce costs related to the SOX compliance effort.Provide ongoing education to process owners on evolving SOX regulations and company finance and information systems policies.Accountable of the rationalization and friction progressive reduction of the SOX Compliance campaigns.General IT Compliance TasksLead, orchestrate and govern a global Compliance and IT Audit program, including the delivery of process improvements and improvements in Technology audit operations.Identification, review and evaluation of the IT risk map and promote a plan to mitigate data risks in the short, mid, and long term.Ensure compliance with internal audit recommendations on IT processes and departments.Ensure how regulatory changes on data impact our business.Ensure alignment between data protection rules with DPO and legal teams.Ensure alignment of AI strategy with new EU AI ACT.Consolidation of reports and establishment of a consistent and unified approach for the collection and presentation of evidence & documentation (narratives, flowcharts, control matrix, segregation of duties analysis, audit reports, etc.).RequirementsMore than 5 years of experience in SOX IT compliance/ assessment projects, either as part of audit engagement teams or in SOX IT advisory engagements.Advisable Bachelor's degree in Computer Science, Telecommunication or Business Administration. At least 5 years in a Big 4 accounting firm.Experience in the implementation of a SOX IT Program in the company side will be also considered as a plus.Knowledge of a wide range of technology (applications, infrastructure, networking, IT management controls). Experience with SAP and Archer is helpful.Knowledge of cybersecurity frameworks (e.g., NIST, ISO27001, NIST CSF, etc.).A solid understanding of SOX compliance requirements; including PCAOB requirements.Understands business processes (e.g., Order to cash, procure to pay, financial reporting etc.) and audit and internal control testing techniques.Detail oriented, self-motivated work style and flexible with good prioritization skills. Ability to multi-task and work in a fast-paced, global team-oriented environment, managing various stakeholders with competing demand.Strong project management, people management, and communication skills.Professional qualification such as CISA, CISM, ISO 27001 Lead Auditor or equivalent is an asset.Ability and willingness to travel.Fluent in English and Spanish.Why Ferrovial?We would like you to get to know us better, and what it means to join our team.Being part of a leading company in its sector and listed simultaneously on 3 stock markets: USA (Nasdaq), the Netherlands (Euronext Amsterdam), and Spain (IBEX 35).A solid and innovative company project with challenging roles and projects.Work with talented professionals in a collaborative environment.Innovative, creative, and respect work environment thanks to the mix of cultures and diversity of our workforce.Professional growth opportunities: global and cross Business Units mobility.Development processes implemented to ensure professional growth.Compelling benefits & rewards.Flexibility work-life balance that offers numerous benefits personally and professionally.Wellbeing initiatives for employees to support your physical and psychological happiness (e.g. psychological support for employees among others).Tools to support productivity: Microsoft Copilot available for employees.Seize the challenge. Move the world together#WeAreFerrovial* Ferrovial is an equal opportunity employer. We treat all jobs applications equally, regardless of gender, color, race, ethnicity, religion, national origin, age, disability, pregnancy, sexual orientation, gender identity and expression, covered veteran status or protected genetic information (each, a "Protected Class"), or any other protected class in accordance with applicable laws.
#J-18808-Ljbffr