Join Our Team as a IT Security & Compliance Manager We are currently recruiting for IT Security & Compliance Manager at our Madrid office. The ideal candidate will have experience in: ITGC So D ERP Controls What You'll Be Doing: Audit response and readiness — primary Act as the single point of contact for external audit, group internal audit and finance control reviews: scope agreement, evidence, walkthroughs, management responses. Maintain one register of IT-related findings from every source, each with a named owner and a date. Report remediation status monthly to the General IT Director, and at each audit cycle to Finance and to Legal & Compliance. Assemble the evidence base before it is asked for: application inventory, system owner matrix, access records, change records, backup and restore records. Internal controls, built from audit requirements Turn each agreed finding into a documented, repeatable control: control objective, control owner, frequency, evidence retained. Start with what is already known to be required, periodic user access review; segregation of duties in ERP and procure-to-pay; a named System Owner for every application. Design controls that can be operated at current headcount. Where one cannot be, record the compensating control and the accepted risk rather than writing a control that will fail its next test. Re-test what has been remediated, and close findings on evidence rather than assertion. Keep the IT policy set current, access, information security and acceptable use,



continuity and aligned to what is actually done. Review new and renewed software and services before any commitment is made: data location, processing terms, security, Gx P impact, exit terms. Conclusion within five working days. Support Legal & Compliance on UK and EU data protection where systems are involved: hosting location, transfers, processing agreements, retention. Represent controls in the SAP and workflow programmes, authorisation model, segregation-of-duties rules, approval matrix, audit logging — and sign off before configuration freeze. Your skills and experience Five or more years in IT audit, IT compliance or IT risk, within or facing a multi-entity international group. Has personally run the company side of an IT audit, scope, evidence, management response, remediation through to closure. Has built and operated IT general controls off the back of findings, not only tested them. Has owned a user access review and segregation-of-duties cycle across an ERP. English to full professional standard, written and spoken; right to work in the Netherlands or Spain. Able to work as the only person in the discipline: sets own priorities and writes own material. CISA, CRISC, or ISO/IEC 27001 Lead Auditor. Pharmaceutical, medical device or medical aesthetics experience, including Gx P and CSV /computerized system validation. SAP authorisation concept and segregation-of-duties design. UK and EU data protection as it applies to systems and vendors. #J-18808-Ljbffr

📌 It security & compliance manager (Madrid)
🏢 Sinclair
📍 Madrid