IT Control and Risk Specialist

SBM Offshore N.V.; Porto; Sur place; EUR 42 000 - 62 000; Plein temps

Résumé du poste

SBM Offshore N.V. seeks an IT Internal Control and Risk Specialist to develop and implement IT control frameworks, assess risks, and strengthen governance across IT platforms. You will collaborate with IT teams, business units, and external auditors to ensure regulatory compliance including GDPR.

You will design and monitor controls to protect IT assets, support audits, and promote proactive risk management within the IT organization. English is essential.

Qualifications

• Bachelor's degree in computer science, information technology, business administration, or related field.
• Relevant certifications such as CISA, CISSP, CRISC, or ITIL preferred.
• Master's degree in business administration, computer science, or related field preferred.
• Proficiency in English essential for communication with team and stakeholders.

Responsabilités

• Develop and implement IT control frameworks and policies to ensure regulatory compliance.
• Conduct risk assessments and identify IT process improvements.
• Design, implement, and maintain internal controls to safeguard IT assets and ensure financial reporting integrity.
• Monitor IT controls, perform reviews, and remediate deficiencies.
• Collaborate with IT teams, business units, and auditors to align controls with objectives.
• Prepare reports on control status, findings, and remediation plans.
• Deliver training to raise awareness of IT controls and risk management.

Connaissances

IT controls

Risk management

Audit support

Stakeholder collaboration

IT security

Regulatory compliance

Leadership

Formation

Bachelor's Degree in CS/IT/Business

Master's degree preferred

English proficiency

Description du poste

Imagine your career taking you to the depths of innovation and the heights of impact. Our people enable continuous progress. Their commitment, collective expertise, and unique capabilities are the engine room behind SBM Offshore's True. Blue. Transition. - shaping the future of energy, and beyond.

About Us

SBM Offshore is a global leader in deepwater ocean infrastructure, delivering floating production solutions across the full asset lifecycle- from design and construction to installation and operation. Supported by a global team of more than 8,000 professionals, the Company operates a long-term, asset-backed business model that delivers high-availability assets and predictable cash flows. SBM Offshore combines engineering expertise, operational reliability, and selective innovation to support safe, efficient, and lower-carbon energy production, while extending its capabilities into new opportunities across the blue economy.

Purpose

• As an IT Internal Control and Risk Specialist, you develop and implement IT control frameworks and risk management strategies. Conduct risk assessments, ensure compliance with regulations, and monitor internal controls. Collaborate with stakeholders to enhance IT security and mitigate risks.

Responsibilities

• Develop and Implement Control Frameworks:
• Lead and participate in the development of IT control frameworks and policies to ensure compliance with regulatory requirements and industry standards.
• Conduct risk assessments and identify areas of improvement in IT processes and systems.
• Design, implement, and maintain internal controls to safeguard IT assets and ensure the integrity of financial reporting.
• Monitor and Evaluate IT Controls:
• Perform regular reviews and testing of IT controls to ensure their effectiveness and adequacy.
• Identify control deficiencies and recommend appropriate remediation actions.
• Monitor IT systems and processes for potential risks and vulnerabilities, and implement corrective measures.
• Collaborate with Stakeholders:
• Work closely with IT teams, business units, and external auditors to ensure alignment of IT controls with business objectives.
• Provide guidance and support to IT and business stakeholders on control-related issues and best practices.
• Collaborate with compliance and risk management teams to ensure integrated risk management across the organization.
• Reporting and Documentation:
• Prepare comprehensive reports on the status of IT controls, including findings, recommendations, and remediation plans.
• Maintain thorough documentation of IT control activities, risk assessments, and audit findings.
• Ensure all control-related documentation is accurate, up-to-date, and accessible.
• Training and Awareness:
• Develop and deliver training programs to increase awareness of IT controls and risk management practices among staff.
• Foster a culture of continuous improvement and proactive risk management within the IT department.
• Support Audit Activities:
• Facilitate internal and external IT audits by providing necessary documentation and support.
• Ensure timely resolution of audit findings and implementation of audit recommendations.
• Act as a liaison between auditors and IT teams to ensure clear communication and efficient audit processes.

Education

• Bachelor's Degree: A bachelor's degree in computer science, information technology, business administration, or a related field is required.
• Certifications: Relevant certifications such as Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Risk and Information Systems Control (CRISC), or ITIL (Information Technology Infrastructure Library) are preferred.
• Advanced Degrees: A master's degree in business administration, computer science, or a related field is preferred but not mandatory.
• Language Proficiency: Proficiency in English is essential for effective communication with team members, stakeholders, and external vendors.

Experience

• At least 5 years of experience in IT operations, internal controls, risk management, or a related field.
• Leadership and Managerial Experience: Proven experience in a leadership or managerial role within IT operations or risk management.
• IT Operations and Risk Management: Demonstrated ability to develop and oversee IT control frameworks, policies, and procedures to ensure compliance with regulatory requirements and industry standards.
• Technical Skills: Strong technical background with hands-on experience in designing, implementing, and managing IT infrastructure, including servers, networks, storage, and cloud environments.
• Regulatory Compliance: Experience with compliance standards and frameworks such as ISO 27001, NIST, and GDPR.
• Audit Support: Proven experience in supporting internal and external IT audits, including preparing documentation and addressing audit findings.
• Analytical and Problem-Solving Skills: Strong analytical skills and the ability to identify, assess, and mitigate IT risks effectively.
• Communication Skills: Excellent communication and interpersonal skills with the ability to liaise effectively with stakeholders at all levels of the organization.
• Certifications: Relevant certifications such as CISA, CISSP, CRISC, or ITIL are preferred.
• Team Leadership: Strong leadership and team-building skills, with the ability to mentor and guide technical staff to achieve performance goals and objectives.

Functional Competencies

• Compliance
• Governance, Risk and Control
• Analytics and reporting
• Digital savvy
• Incident Management
• Internal Audit Delivery
• Risk Management
• Technical Data Management

GENERAL INFORMATION

SBM Offshore N.V. is a listed holding company that is headquartered in Amsterdam. It holds direct and indirect interests in other companies that collectively with SBM Offshore N.V. form the SBM Offshore Group ("the Company"). For further information, please visit our website at www.sbmoffshore.com. The companies in which SBM Offshore N.V., directly and indirectly, owns investments are separate entities.

SBM Offshore is proud to be an Equal Employment Opportunity and Affimative Action employer. SBM Offshore does not discriminate on the basis of race, religion, color, sex, gender identity, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status, or any other basis covered by appropriate law. All employment is decided on the basis of qualifications, merit, and business need.