Company Description

At SGS, we are the world's leading testing, inspection, and certification company, setting the global benchmark for sustainability, quality, and integrity. With a network of 2,650 offices and laboratories and a dedicated team of 97.000 employees, we work together to create a better, safer, and more interconnected world.

Job Description

As Group IT Audit Manager you will develop the global IT audit strategy, oversee delivery of IT audit engagements, and ensuring technology risks are effectively identified, assessed and reported across the organization. This role integrates strategic planning, stakeholder leadership, methodology ownership and hands-on execution.

Responsibilities include:

• Own the IT Audit Plan: Develop and maintain the annual and multi-year IT audit plan aligned to SGS's risk landscape, Minimum Control Standards (MCS), digital initiatives and business strategy.
• Lead Delivery of IT Audits: Plan and execute (or oversee outsourced execution of) audits covering IT General Controls (ITGC), cybersecurity, ERP systems, cloud environments, key applications and local systems.
• Methodology & Tooling: Develop and enhance IT audit methodology, programs and templates aligned with IIA Standards and SGS Internal Audit methodology.
• Data Analytics Enablement: Define and implement the data analytics roadmap for Internal Audit, including continuous monitoring and automated data-driven testing.
• Project & Transformation Assurance: Provide assurance over major IT programs, system implementations, migrations and cybersecurity initiatives.
• Stakeholder Management: Serve as the primary liaison for technology-related assurance matters, ensuring alignment with Group IT, Group Risk Management & Internal Controls and related functions.
• Reporting & Issue Follow-up: Produce high-quality audit reports and ensure timely tracking and remediation of identified issues.
• Capability Building: Train Internal Audit staff on IT controls, cybersecurity fundamentals, ERP concepts and audit analytics.
• Risk Foresight: Monitor emerging technologies, regulatory trends and threat developments and update audit strategies accordingly.

Videos To Watch