IT Internal Control Senior Analyst

Summary of the role:
As the IT Internal Control Senior Analyst, you’ll support the coordination and monitoring of the effectiveness of the design and operation of the finance internal control model, update it with the input from control and process owners, and follow up on the action items detected by the internal supervision and evaluation from Group Internal Audit. You’ll perform the segregation of duties (SoD) analysis, reporting to risk and role owners. You’ll assist in the definition, implementation, and monitoring of risk mitigation.

In this role you’ll:
1. **Provide process controls support**
- Support the coordination and monitoring for the periodical evaluation of effectiveness of the design and operation of the internal control globally applicable to Finance controls
- Design and update the ICFR Matrix controls for new companies included in the Scope. Automation of manual controls and correct working of out-of-the-box controls in SAP GRC
- Participate in the design of financial and operational processes, including development of internal controls and evaluation of control environment
- Monitor the updating and documentation of processes with impact on financial reporting (carried out by the business units involved in the financial reporting process)
- Follow up on the results of the assessment process
- Collaborate in the implementation of the recommendations for improvements arising from the process of evaluation of the group within the agreed upon timeframe
- Prepare reports on the situation of the ICFR in collaboration with the internal audit unit, using SAP GRC capabilities
- Identify and prepare training courses needed across the organization related to Internal Control: SAP GRC usage, and COSO, ICFR principles
- Participate in collaboration projects to share SAP GRC knowledge that could be applicable to other frameworks than ICFR
- Coordinate with other financial audits, in order to find synergies in the evidence gathering for internal and external auditors

2. **Support access controls**
- Update SoD corporate matrix applicable to ICFR: maintain up to date SAP GRC (S4H, COUPA, SAP HR)
- Perform SoD analysis/assessment on existing users to identify risk, and prepare reporting of SoD risks to their owners
- Define and implement mitigating controls for SoD risks, identified in the companies/systems in scope
- Follow up on the results of the evaluation from the internal and external auditors
- Collaborate on the implementation of the recommendations for improvement arising from the process of evaluation of the group
- Propose mitigation controls for the existing risks or users with risks to the role and risk owners.
- Implement the mitigation controls in GRC, trying to link SAP GRC access with SAP GRC process when possible

3. **Serve as champion for continuous improvement and automation**
- Advise on control testing automation: to perform ICFR control monitoring avoiding manual performance
- Advise on control execution automation to support business in their control performance activities
- Define automatic controls to mitigate SoD risks
- University degree in Computer Science, Engineering, or Telecommunications
- At least 2 years of experience in a Big 4 firm in IT audit
- Understanding of business processes, accounting fundamentals, auditing, internal control, risk management, IT controls and related standards (COSO)
- Good understanding of the travel and distribution industry would be an asset
- Experience in SAP preferred, but will be trained in SAP GRC (process and access controls)
- Proficient in English (both verbal and written)
- Ability to work in a fast-paced environment and meet tight deadlines
- Ability to clearly communicate information to a wide range of audiences
- Excellent analytical skills and attention to detail are a must