ITGC & SAP Access Governance Specialist

Ariston Holding N.V.; Italia; Remote; EUR 36,000 - 44,000; Full time

Job summary

Ariston Group is seeking a skilled ICT Governance, Risk & Compliance professional to support group-level ITGC governance, SAP/ERP access governance and IT risk management. You will coordinate audit evidence collection, track remediation plans and manage IAM processes for SAP and ERP environments, focusing on authorization, SoD, and access reviews.

You will work with control owners, auditors and IT security teams to ensure effective control execution and timely remediation, in a multinational,

Qualifications

• 4–5 years of experience in ICT Governance, Risk & Compliance or related roles.
• Solid understanding of IT General Controls, control testing and audit evidence management.
• Experience with SAP/ERP access management, SoD, RBAC and related governance activities.
• Familiarity with IAM lifecycle processes and SAP GRC is advantageous.
• Knowledge of ISO 27001, COBIT, GDPR IT controls or similar.

Responsibilities

• Support IT General Control compliance and IT Controls across ICT processes and systems.
• Coordinate evidence, control owners, findings and remediation actions for audits.
• Conduct initial comprehensive IT risk assessment and maintain the ICT risk register.
• Monitor remediation plans and escalate delays or risks with action owners.
• Manage SAP/ERP Identity Access Management processes and access reviews.
• Coordinate SoD governance, including conflict analysis and remediation follow-up.
• Oversee access review campaigns and evidence collection.
• Manage access-related tickets and privilege-change requests.

Skills

ITGC knowledge

SAP/ERP access governance

Risk assessment

Audit coordination

IAM lifecycle

SoD analysis

GRC frameworks

English communication

Tools

SAP GRC

RBAC analysis

User revalidation tools

Job description

Ariston Group is seeking a skilled ICT Governance, Risk & Compliance professional to support group-level ITGC governance, SAP/ERP access governance and IT risk management. You will coordinate audit evidence collection, track remediation plans and manage IAM processes for SAP and ERP environments, focusing on authorization, SoD, and access reviews.

You will work with control owners, auditors and IT security teams to ensure effective control execution and timely remediation, in a multinational,