Senior IT Compliance Auditor - SOX & ITGC Leader

Total Marketing Support Limited; Kraków; On-site; PLN 180,000 - 280,000; Full time

Job summary

DS Smith is seeking a Senior Technology Compliance Auditor to lead and execute concurrent technology audit engagements focused on internal controls over financial reporting in a dual-listed environment. You will ensure timely, high-quality delivery and partner with IT and business leadership to translate findings into remediation plans.

The role requires 3–5 years in tech risk and compliance, hands-on ITGC testing, familiarity with US SOX and UK Provision 29, and experience coordinating with

Qualifications

• 3–5 years of combined technology, risk, and compliance experience.
• Experience reviewing work performed by others (peer review or contractor oversight).
• Hands-on experience with IT General Controls (ITGCs) testing.
• Familiarity with US SOX and UK Corporate Governance Code (Provision 29).
• Experience working with external auditors (e.g., Big 4).
• Strong leadership and ability to work both independently and in teams.

Responsibilities

• Lead multiple audit engagements in parallel, managing timelines, scope and stakeholders.
• Test ITGCs, ITACs, and key reports supporting financial processes and ensure evidence standards.
• Coordinate with external auditors and support walkthroughs and evidence requests.
• Translate audit results into actionable remediation plans and strengthen controls.
• Communicate risks and remediation needs clearly to IT management and senior stakeholders.

Skills

Project management

Audit delivery

Stakeholder communication

ITGCs

SOX compliance

External auditors liaison

Team leadership

Independent work

English fluency

Job description

DS Smith is seeking a Senior Technology Compliance Auditor to lead and execute concurrent technology audit engagements focused on internal controls over financial reporting in a dual-listed environment. You will ensure timely, high-quality delivery and partner with IT and business leadership to translate findings into remediation plans.

The role requires 3–5 years in tech risk and compliance, hands-on ITGC testing, familiarity with US SOX and UK Provision 29, and experience coordinating with