Manager IT Compliance (m/f/d)

100055 Fresenius Kabi Deutschland GmbH; Barcelona; Presencial; EUR 70.000 - 90.000; Jornada completa

Descripción de la vacante

100055 Fresenius Kabi Deutschland GmbH in Barcelona is looking for an experienced IT Compliance Manager to oversee and ensure the integrity and compliance of IT systems, primarily focusing on IT General Controls (ITGCs) for SAP and finance systems.

The ideal candidate will have a master's degree in IT and at least 5 years of IT compliance experience. Responsibilities include monitoring compliance with internal and external standards and working closely with stakeholders to mitigate IT-related risks.

Formación

• Minimum of 5 years in IT compliance, IT audit or risk management.
• Experience with GxP systems is advantageous.
• Solid understanding of IT risk management practices.

Responsabilidades

• Design, implement and monitor ITGCs for SAP and non-SAP finance-related systems.
• Oversee IT general controls for GxP-regulated systems.
• Work with Corporate Audit to assess and analyze IT findings.

Conocimientos

Strong analytical skills

Excellent communication skills

Detail-oriented

Organizational skills

Educación

Master’s degree in Information Technology, Computer Science, Business Administration or related field

CISA, CISM, CISSP certification

Herramientas

SAP GRC or similar compliance management tools

Descripción del empleo

We are seeking an IT Compliance Manager to oversee and ensure the integrity and compliance of our IT systems, particularly in the areas of IT General Controls (ITGCs) for SAP and finance systems. In this role you will work closely with Corporate Audit, IT Risk Management and other stakeholders to identify, assess and mitigate IT‑related compliance risks. Validation and IT Quality will be crucial stakeholders to ensure alignment of the ITGC framework with GxP lifecycle management requirements of computerized systems.

Key Responsibilities

• Design, implement and monitor IT general controls (ITGCs) for SAP and non‑SAP finance‑related systems to ensure adherence to internal and external compliance standards. Ensure that all controls for financial data processing, reporting, and access are functioning effectively and in line with relevant regulations and collaborate with the finance team to align financial reporting with ITGCs.
• Oversee IT general controls for GxP‑regulated systems to maintain compliance with applicable regulatory standards (e.g., FDA, GMP, GxP guidelines). Partner with stakeholders in IT and Internal Control departments to define synergies in ITGCs definition for all systems, including GxP, and evaluate SOC reports of partners providing IT services to ensure compliance with internally defined standards.
• Work with Corporate Audit to assess and analyze IT findings from internal and external audits, assist in identifying IT‑related audit issues, provide input on corrective action plans, and support audit efforts by providing documentation, evidence and explanations related to IT compliance activities.
• Partner with IT Risk Management to identify and assess IT compliance and security risks, provide recommendations and support for the development and implementation of risk mitigation strategies and controls, and assist in the preparation of risk assessments to ensure appropriate ITGCs are in place.
• Continuously assess the effectiveness of existing compliance controls, recommend improvements to enhance security and efficiency and keep knowledge up to date while assisting in the preparation for and coordination of regulatory inspections or audits.
• Stay updated on evolving regulatory requirements for AI in GxP, finance and other regulated environments. Work closely with the internal AI Center of Excellence and cross‑functional teams to align AI initiatives with compliance requirements, ensuring AI systems and applications comply with internal and external governance frameworks.
• Develop and deliver training on AI compliance requirements, risks and best practices, fostering a culture of responsible AI use and compliance across the organization.
• Develop and deliver training materials to ensure business units are educated about IT compliance requirements, policies and controls, promoting a culture of compliance awareness.
• Maintain comprehensive documentation of all IT compliance activities, including risk assessments, control testing, audit findings and prepare periodic compliance reports for senior management, outlining key issues, risks and status of mitigation actions.

Qualifications

• Education: Master’s degree in Information Technology, Computer Science, Business Administration or related field. A relevant compliance certification (e.g., CISA, CISM, CISSP) is an advantage.
• Experience: Minimum of 5 years in IT compliance, IT audit or risk management with a focus on SAP and finance systems; experience with GxP systems is an advantage. Experience working with audit functions and cross‑functional teams to identify and resolve IT compliance issues, experience with AI governance, validation and risk management in regulated industries, and solid understanding of IT risk management practices, controls and frameworks (e.g., COSO, COBIT).
• Skills: Strong analytical skills for assessing complex IT and business processes for compliance risks, excellent communication skills to explain technical concepts to non‑technical stakeholders and detail‑oriented with strong organizational and documentation skills.
• Preferred Qualifications: Knowledge of SAP GRC or similar compliance management tools; experience in life sciences or pharmaceutical industries with a focus on GxP‑compliant systems.