Join Our Team as a IT Security & Compliance Manager
We are currently recruiting for IT Security & Compliance Manager at our Madrid office.
ERP Controls
Founded in 1971, Sinclair is a global medical aesthetics organisation, that delivers an extensive product range. With an in-house commercial infrastructure, including manufacturing and a network of distributors in leading global markets, our products are sold in 55 countries worldwide.
100% Compliance with all rules, standard operating procedures and guidelines
✅ Results-Driven Make a business impact in all you do, whether sales, efficiency, operational excellence; Innovation-Centered Redefining Aesthetics, we must be pioneering in how we do business; Act as the single point of contact for external audit, group internal audit and finance control reviews: scope agreement, evidence, walkthroughs, management responses.
• Report remediation status monthly to the General IT Director, and at each audit cycle to Finance and to Legal & Compliance.
• Assemble the evidence base before it is asked for: application inventory, system owner matrix, access records, change records, backup and restore records.
Internal controls, built from audit requirements
• Turn each agreed finding into a documented, repeatable control: control objective, control owner, frequency, evidence retained.
• segregation of duties in ERP and procure-to-pay; Design controls that can be operated at current headcount. Where one cannot be, record the compensating control and the accepted risk rather than writing a control that will fail its next test.
• Re-test what has been remediated,



and close findings on evidence rather than assertion.
Standing compliance duties
• Keep the IT policy set current — access, information security and acceptable use, continuity — and aligned to what is actually done.
• Review new and renewed software and services before any commitment is made: data location, processing terms, security, GxP impact, exit terms. Support Legal & Compliance on UK and EU data protection where systems are involved: hosting location, transfers, processing agreements, retention.
• Represent controls in the SAP and workflow programmes — authorisation model, segregation-of-duties rules, approval matrix, audit logging — and sign off before configuration freeze.
Five or more years in IT audit, IT compliance or IT risk, within or facing a multi-entity international group.
Has built and operated IT general controls off the back of findings, not only tested them.
Has owned a user access review and segregation-of-duties cycle across an ERP.
English to full professional standard, written and spoken; Pharmaceutical, medical device or medical aesthetics experience, including GxP and CSV /computerized system validation.
SAP authorisation concept and segregation-of-duties design.
UK and EU data protection as it applies to systems and vendors.
Hybrid/Remote Work Options (if applicable)
The company is full of opportunity for those who wish to grasp it. Our people thrive on engagement, development and a varied workload. You will often be included in projects that require you to collaborate cross-functionally.
This is an exciting opportunity to join a successful company, with big ambitions for the future.

📌 IT Security & Compliance Manager - Madrid Office (San Fernando de Henares)
🏢 Sinclair
📍 San Fernando de Henares