Join Our Team as a IT Security & Compliance Manager
We are currently recruiting for IT Security & Compliance Manager at our Madrid office.
The ideal candidate will have experience in:
- ITGC
- SoD
- ERP Controls

What You'll Be Doing:
Audit response and readiness — primary
- Act as the single point of contact for external audit, group internal audit and finance control reviews: scope agreement, evidence, walkthroughs, management responses.
- Maintain one register of IT-related findings from every source, each with a named owner and a date.
- Report remediation status monthly to the General IT Director, and at each audit cycle to Finance and to Legal & Compliance.
- Assemble the evidence base before it is asked for: application inventory, system owner matrix, access records, change records, backup and restore records.

Internal controls, built from audit requirements
- Turn each agreed finding into a documented, repeatable control: control objective, control owner, frequency, evidence retained.
- Start with what is already known to be required,



periodic user access review; segregation of duties in ERP and procure-to-pay; a named System Owner for every application.
- Design controls that can be operated at current headcount. Where one cannot be, record the compensating control and the accepted risk rather than writing a control that will fail its next test.
- Re-test what has been remediated, and close findings on evidence rather than assertion.
- Keep the IT policy set current, access, information security and acceptable use, continuity and aligned to what is actually done.
- Review new and renewed software and services before any commitment is made: data location, processing terms, security, GxP impact, exit terms. Conclusion within five working days.
- Support Legal & Compliance on UK and EU data protection where systems are involved: hosting location, transfers, processing agreements, retention.
- Represent controls in the SAP and workflow programmes, authorisation

📌 IT Security (Madrid)
🏢 Sinclair
📍 Madrid