GRC Junior (m/f/d)

Illumiti Inc.; Barcelona; Hybrid; EUR 30,000 - 40,000; Full time

Benefits offered by this job

Health insurance

Flexible working hours

Training and certifications

Job summary

Syntax’s GRC function seeks a new/recent graduate to join as a GRC associate (m/f/d). The role involves regulatory compliance, ISO 27001 management, quality management, control walkthroughs, and support for SOC1/SOC2 audits. The successful candidate will work with cross-functional teams, in a largely remote setting, with opportunities for growth.

Recent graduates are welcome to apply. Nationality or work authorization for Spain or Portugal is required.

Qualifications

• Bachelor’s degree in accounting, business administration, or relevant degree.
• Enrollment into CPA program or CISA and ISO 27001 Auditor preferred.
• Knowledge of IT Technology for Data Center and Cloud (AWS, Azure, Google).
• Knowledge of ITIL tailored to ISO 20.000-1.
• Knowledge of ISO 27001, ISO 9001, ENS, TISAX, BAIT, DORA, C5 Standards.
• Experience working with audit and compliance tools (e.g. Eramba).
• Critical thinking and strong analytical skills to evaluate risks and develop solutions.
• Excellent communication skills and ability to present to stakeholders.
• Able to work independently in a remote setting and prioritize tasks.

Responsibilities

• Support regulatory compliance efforts and monitor regulations.
• Audit ISO 27001 and maintain its management system.
• Support Quality Management System audits and maintenance.
• Coordinate control walkthroughs with process owners and auditors.
• Assist on service offerings compliance and address governance concerns.
• Assist in SOC1 and SOC2 audits and manage issues.
• Collaborate with stakeholders to map processes and test controls.
• Identify and report control weaknesses and assess risk.
• Research audit trends and their impact on the business.
• Coordinate internal audits with the GRC Director/Manager.
• Support policy management and periodic reviews.
• Assist in identifying, assessing and tracking information security risks.

Skills

Analytical skills

Excellent communication

Independent remote work

Critical thinking

Stakeholder engagement

Education

Bachelor’s degree in accounting or business administration

CPA/CISA and ISO 27001 Auditor preferred

Tools

Eramba

Job description

Select how often (in days) to receive an alert:

Syntax has undisputed strength to implement and manage ERP deployments (Oracle, SAP) in a secure and resilient private, public or hybrid cloud. With strong technical and functional consulting services, and world-class monitoring and automation, Syntax serves some of North America’s largest corporations across a diverse range of industries. Syntax has offices worldwide, and partners with Oracle, SAP, AWS, Microsoft, IBM and other global technology leaders.

GRC Associate (m/f/d)

Syntax’s Governance, Risk and Compliance (GRC) function is looking for a new/recent graduate to join as an GRC associate (m/f/d). We are looking for someone who will thrive in complex and diverse work environment to join a team of high performing professionals. The selected individual will have the opportunity to be heavily involved in various GRC projects and have direct interaction with various functions at Syntax.

Recent graduates are welcome to apply.

The associate will be involved in (but not limited to) the following activities:

• Regulatory Compliance:Support compliance efforts with ENS (Spanish Security Regulations) and other relevant standards. Monitor emerging and changing regulations and support the implementation of new compliance obligations.
• ISO 27001 Management System:Assist in auditing and maintaining the ISO 27001 Management System, ensuring continuous improvement and compliance with information security standards.
• Quality Management System Support:Support the audit and maintenance of the Quality Management System, contributing to organizational excellence.
• Control Walkthroughs:Coordinate and facilitate control (IT, business process, security, etc.) walkthrough meetings with process owners from each business unit and external auditors.
• Service Offerings Compliance:Assist the Director/Manager on compliance matters related to our service offerings and support account managers in addressing customer concerns related to governance and compliance matters.
• Audit Project Management:Assist in managing the execution and completion of external audits for SOC1 and SOC2 audits, and escalated issues identified in a timely manner.
• Stakeholder Liaison:Collaborate with key stakeholders across various business functions to obtain a detailed understanding of control processes, create end-to-end process narratives, process maps, and execute test procedures.
• Control Weakness Assessment:Identify and report control weaknesses, objectively assess their severity and materiality, and communicate the potential impact on Syntax’s business clearly and professionally.
• Research and Trends:Conduct research on emerging audit and risk-related issues, trends, and methodologies to assess their impact on Syntax’s business and implications for internal audits.
• Internal Audit Coordination:Work directly with the Director/Manager of GRC/Internal Compliance to execute a risk-based internal audit plan, evaluating the design and operations of internal controls over Syntax’s IT systems and financial and operational processes, including audits according to BAIT or EU Banking Regulations.
• Governance and Policy Management: Support the review, maintenance and communication of corporate policies, standards, procedures, and control documentation. Coordinate periodic reviews and approvals with policy owners and management.
• Risk management: Assist in identifying, assessing, documenting, monitoring, and tracking information security, operational, and compliance risks. Maintain the risk register and support the development and tracking of risk mitigation and remediation plans.

What you will bring:

• Bachelor’s degree in accounting, business administration, or relevant degree
• Enrollment into CPA program or CISA and ISO 27001 Auditor preferred
• Knowledge of IT Technology for Data Center and Cloud (AWS, Azure, Google)
• Knowledge of ITIL tailored to ISO 20.000-1
• Knowledge of ISO 27001, ISO 9001, ENS, TISAX, BAIT, DORA, C5 Standards
• Experience working with audit and compliance tools (e.g. Eramba) would be preferred
• Critical thinking and strong analytical skills to evaluate areas of risks and develop appropriate solutions
• Excellent communication skills (verbal and written) and be able to present confidently to various key stakeholders across the company
• Be able to work independently in a remote setting and effectively prioritize multiple tasks with competing deadline

Additional mandatory requirements:

Nationality or Work Authorization: Spanish or Portuguese nationality, or alternatively a permanent work permit/VISA for Spain or Portugal.

Why Syntax?

Become a part of our success story and work in a company with exciting innovation projects that are causing a stir across the industry. We recently launched one of the world's most advanced manufacturing facilities based on SAP S/4HANA Cloud and SAP Digital Manufacturing Cloud for Execution - for Smart Press Shop, a pioneering joint venture between Porsche and forming specialist Schuler.

• Global tourist: With us, you can also work from abroad from time to time
• Flexible working time models, home office
• Attractive benefits, e.g. health offers
• A modern environment in which the "you" is part of it
• Open feedback culture, flat hierarchies and a motivated team
• Individual career planning with continuous training and coaching on the job
• Flexible hours, Monday to Thursday 8h, and Fridays.... 6h. In addition, the whole month of August and the first half of September we have an intensive timetable.28 days holiday (23 days holiday + 4 days at Christmas from 15 December to 15 January + 1 day for your birthday)!
• Windows laptop for work (Dell or Lenovo)!
• Apple or Android smartphone...you choose!
• Two lovely offices with a nice garden to relax and have a coffee
• Free coffee and soft drinks
• Medical insurance with Sanitas
• Training: Free AWS and SAP certifications, internal workshops and free access to Linkedin E-learning
• Free online English, German, Spanish or French classes through a platform

Copyright 2023 Syntax, All Rights Reserved