Segment SOX Officer

• The Segment SOX Officer plays a critical role within the SOX & Compliance team at Luxembourg, as he/she is
• Lead and manage independently the local SOX ITGC program for the defined scope aligning it with the requirements of the Global SOX program.
• Coordinate with ArcelorMittal Global IT Compliance Team / Global Assurance and the local IT Team for the SOX compliance program and be a focal point & take ownership for all SOX ITGC related issues and recommendations.
• Provide timely status reporting as required by Global IT Compliance/FPE SOX team, and periodic status reports to the local IT management.
• Identify/setup quick mitigation plans allowing to minimize/reduce Gaps
• Participate/supervise urgent SOX action/mitigation plans involving several teams (business and IT)
• Provide periodic management reporting allowing to give a synthetic view of the portfolio, issues and mitigations actions/plans
• Optimize the SOX IT General Controls and related processes; and provide consultation & advisory for various best practices on SOX ITGC related matters.
• Coordinate with the business for periodic risk assessments & scoping activities.
• Create and Maintain (with periodic review) of ITGC RCM, control descriptions and preparation of testing procedures aligning it with the global framework.
• Organize & Monitor the Internal SOX ITGC Testing – ToD, ToE & RF phases with the identified resources.
• Manage any Gaps raised internally including follow-ups for remediation & mitigation activities; and provide consultancy for remediation & mitigation efforts.
• Ensure the external SOX ITGC audits are planned, organized & coordinated with the relevant stakeholders, adhering to the group compliance calendar / requirements.
• Organize and manage necessary periodic meetings, status updates with the external audit team for SOX ITGC requirements to discuss and agree upon the audit results and findings.
• Manage any Gaps raised externally including follow-ups for remediation & mitigation activities; and provide consultancy for remediation & mitigation.
• Evaluate open deficiencies for ITGCs at year end for financial statement risk, perform risk assessments for any terminal gaps and manage them for a quick close-out.
• Maintenance of SOX ITGC GAP Summary report - Preparation, updating and follow-up, and ensure that remediation activities are done on a timely basis as per group guidelines.
• Provide all necessary advisories, participate in key project initiatives for identifying & managing related SOX requirements.
• Support control implementation for new controls coming from ITGC framework update / change of existing ITGCs for existing scope.
• The Segment SOX Officer will be connected to all IT teams (based in India at the GCC or in Europe) and is reporting to Head of D&IT Finance & Compliance.

Minimum applicant attribute

• 8-10 years of relevant experience as IT auditor (including as internal auditor).
• Strong Knowledge of SAP Security & Authorizations (Knowledge of application / tool is a plus: SAP GRC or SAP IG or Pathlock or CSI AA, SailPoint ARM)
• Background in IT Engineering is a plus.
• Strong knowledge in ITGC/ITAC, GDPR.
• IT Project/change management in relation to SOX (e.g. deploy SOX to an existing app)
• Excellent understanding of IT applications, architecture and systems.
• Excellent communication skills and capability to synthetize, coordinate and report to C-level business people
• Assertive and ability to coordinate multi-cultural and multi-sites teams of different levels
• Excellent communication, negotiation, networking and listening skills.
• Strategic mindset and problem-solving skills.
• Analytical mindset and creativity to seek, encourage innovation.
• Strong customer-oriented mindset and real sense of emergency.