IT Risk Expert

Company Description
- Work smart, have fun and make an impact_

**EcoVadis is the leading provider of business sustainability ratings.**

Our solutions are backed by an international team of experts and powerful technology. We analyze data and build sustainability scorecards that give companies actionable insights into their environmental, social and ethical risks.

Be a part of the global sustainability change in business. Grow your career. Work with extraordinary people. Feel valued for your contribution.

Learn more about our team and culture on EcoVadis careers page

If you have questions about the company or open roles you can Chat with an insider

**Job Description**:
The role of IT Risk Expert is to ensure key company information is effectively safeguarded.

In order to achieve this objective IT Risk Expert will lead all work around IT risk identification, assessment and response. Work will be performed with the collaboration of other functions, e.g. Internal Controls, Information Security and IT Security.

Primary Responsibilities
- Undertaking risk reviews of the IT control framework;
- Assisting in finding practical and cost-effective solutions to identified or revealed security and risk issues;
- Providing direction and guidance in the development, implementation, and communication of risk-related policies and standards;
- Providing aggregated risk supervision for various high impact areas of IT services for core components of IT risk measurement and reporting activities;
- Actively engaging in end-to-end risk remediation planning, resolution, and monitoring activities;
- Assisting in developing and implementing policy and guidance;
- Support Internal Control team by performing GITC testing;
- Prepare audit reports and documents observations and commitments clearly, accurately and timely to enable tracking verification;
- Review and assess corrective and preventive action plans and execute follow-up activities, including verification of remediation commitments, documentation of results, reporting on follow-up status, and escalation of any identified risk;
- Builds and maintains trusting, collaborative relationships and partnerships with internal and external stakeholders to accomplish business objectives;
- Maintain awareness of new and emerging technologies, regulatory requirements and enforcement trends related to IT systems, Data Integrity and regulatory requirements.

**Qualifications**:
Fundamentals:

- Min. 5-8 years relevant working experience, of which a significant amount in IT auditing;
- CISA or CRISC certificate;
- Good knowledge of IT environments, IT operating systems, mobile and internet technologies;
- Knowledge of cloud computing;
- Knowledge of IT processes;
- Knowledge of IT security concepts;
- Knowledge of IT audit methodology;
- Understanding of SOX requirements in regards to IT environment and experience in performing IT controls testing;
- Languages: English - Full professional proficiency;

Other requirements:

- Pro-active, critical, curious and like to take initiatives;
- Accurate, creative in your solutions and a team player who’s capable of working in international teams, as well as independently;
- Structured and performance oriented, and keen to take the initiative to make a difference;
- Customer-oriented, able to put yourself in the position of an audit client without losing objectivity;
- Assertive and bold enough to challenge management and recommend improvements;
- Presentation skills.

Additional Information

Our growing team in Spain is full of talented professionals from various fields who all share a desire to make sustainability real. We offer competitive salaries and support personal growth from day one.

This includes extensive onboarding, teammates' support and a brand-new e-learning platform bursting with courses and modules. So you can learn new skills and fine-tune old ones

In return for your expertise and energy, we offer:
**Working organization benefits**:

- Casual and very friendly work environment
- Hybrid work organization (from the office or from home)
- Flexible working hours
- Home office allowance program
- IT equipment allowance
- Working from anywhere policy
- Opportunity to work in a truly international atmosphere

**Compensation benefits**:

- Base salary + variable compensation plan
- GRSP and TFSA matching program available
- Meals and Transportation Vouchers (Cobee card)

**Wellness and Healthcare benefits**:

- Health, Wellness, and Dental Benefits
- Life Insurance, Critical Illness, Accidental death, long-term disability insurance
- Free virtual Yoga/Pilates

**More**:

- Employee referral bonus policy
- Paid employee volunteer day
- Paid moving day ( 1/year)
- Access to online learning library
- Virtual and in-person team building events
- Co-working space with various services + opportunity to work in different locations (Europe and International)