Senior IT Security & Compliance Lead (ERP & Audit)

Sinclair; Madrid; On-site; EUR 55,000 - 85,000; Full time

Job summary

Sinclair in Madrid is seeking an IT Security & Compliance Manager to lead audit readiness and internal controls across IT systems. You will act as the primary liaison for external audits, maintain evidence, and drive remediation with clear ownership.

The role requires 5+ years in IT audit/compliance, SAP/ERP control design, and strong English. You will work in a multinational context with UK/EU data protection exposure and independent work capability.

Qualifications

• Five or more years in IT audit, IT compliance or IT risk.
• Led company-side IT audit including scope, evidence, management response and closure.
• Built and operated IT general controls from audit findings across ERP.
• Owned user access reviews and SoD across ERP systems.
• Proficient English, able to work in Spain or Netherlands.
• Capable of working independently; drives own priorities and materials.

Responsibilities

• Act as single point of contact for external audit and internal group audits.
• Maintain a register of IT-related findings with owner and date.
• Report remediation status monthly to Global IT Director and Finance/Legal & Compliance.
• Assemble evidence base: inventory, owner matrix, access/change/backup records.
• Turn findings into documented, repeatable controls with owner and frequency.
• Review software before commitment: data location, terms, security, CSV, exit terms.
• Support UK/EU data protection for systems with hosting locations and transfers.
• Represent controls in SAP/workflow programs: authorization model and audit logging.
• Re-test remediated findings and close with evidence over assertions.

Skills

IT audit

IT compliance

IT risk

Segregation of duties (SoD)

ERP controls

English proficiency

Education

CISA/CRISC/ISO 27001 Lead Auditor certification

Tools

SAP

Job description

Sinclair in Madrid is seeking an IT Security & Compliance Manager to lead audit readiness and internal controls across IT systems. You will act as the primary liaison for external audits, maintain evidence, and drive remediation with clear ownership.

The role requires 5+ years in IT audit/compliance, SAP/ERP control design, and strong English. You will work in a multinational context with UK/EU data protection exposure and independent work capability.