Segment SOX Officer

The Segment SOX Officer plays a critical role within the SOX & Compliance team at Luxembourg, as he/she is

• Lead and manage independently the local SOX ITGC program for the defined scope aligning it with the requirements of the Global SOX program.

• Coordinate with ArcelorMittal Global IT Compliance Team / Global Assurance and the local IT Team for the SOX compliance program and be a focal point & take ownership for all SOX ITGC related issues and recommendations.

• Provide timely status reporting as required by Global IT Compliance/FPE SOX team, and periodic status reports to the local IT management.

• Identify/setup quick mitigation plans allowing to minimize/reduce Gaps

• Participate/supervise urgent SOX action/mitigation plans involving several teams (business and IT)

• Provide periodic management reporting allowing to give a synthetic view of the portfolio, issues and mitigations actions/plans

• Optimize the SOX IT General Controls and related processes; and provide consultation & advisory for various best practices on SOX ITGC related matters.

• Coordinate with the business for periodic risk assessments & scoping activities.

• Create and Maintain (with periodic review) of ITGC RCM, control descriptions and preparation of testing procedures aligning it with the global framework.

• Organize & Monitor the Internal SOX ITGC Testing – ToD, ToE & RF phases with the identified resources.

• Manage any Gaps raised internally including follow-ups for remediation & mitigation activities; and provide consultancy for remediation & mitigation efforts.

• Ensure the external SOX ITGC audits are planned, organized & coordinated with the relevant stakeholders, adhering to the group compliance calendar / requirements.

• Organize and manage necessary periodic meetings, status updates with the external audit team for SOX ITGC requirements to discuss and agree upon the audit results and findings.

• Manage any Gaps raised externally including follow-ups for remediation & mitigation activities; and provide consultancy for remediation & mitigation.

• Evaluate open deficiencies for ITGCs at year end for financial statement risk, perform risk assessments for any terminal gaps and manage them for a quick close-out.

• Maintenance of SOX ITGC GAP Summary report - Preparation, updating and follow-up, and ensure that remediation activities are done on a timely basis as per group guidelines.

• Provide all necessary advisories, participate in key project initiatives for identifying & managing related SOX requirements.

• Support control implementation for new controls coming from ITGC framework update / change of existing ITGCs for existing scope.

The Segment SOX Officer will be connected to all IT teams (based in India at the GCC or in Europe) and is reporting to Head of D&IT Finance & Compliance.

Minimum applicant attribute:

• 8-10 years of relevant experience as IT auditor (including as internal auditor).

• Strong Knowledge of SAP Security & Authorizations (Knowledge of application / tool is a plus: SAP GRC or SAP IG or Pathlock or CSI AA, SailPoint ARM)

• Background in IT Engineering is a plus.

• Strong knowledge in ITGC/ITAC, GDPR.

• IT Project/change management in relation to SOX (e.g. deploy SOX to an existing app)

• Excellent understanding of IT applications, architecture and systems.

• Excellent communication skills and capability to synthetize, coordinate and report to C-level business people

• Assertive and ability to coordinate multi-cultural and multi-sites teams of different levels

• Excellent communication, negotiation, networking and listening skills.

• Strategic mindset and problem-solving skills.

• Analytical mindset and creativity to seek, encourage innovation.

• Strong customer-oriented mindset and real sense of emergency.