Global IT Compliance Officer

ArcelorMittal is seeking a Global IT Compliance Officer to join its Global IT Compliance (GIC) team based in Luxembourg. The role provides a unique opportunity to work in a global environment, partnering with business, IT, finance, internal controls, and external audit stakeholders across multiple regions.

The successful candidate will support the design, implementation, governance, and continuous improvement of ArcelorMittal's IT compliance and SOX framework, ensuring a strong and sustainable internal control environment across the organization.

Key Responsibilities

SOX & IT Compliance Governance

• Support the annual SOX compliance program across global business units and IT organizations.

• Coordinate IT General Controls (ITGCs), IT Application Controls (ITACs), and automated controls implementation and testing activities.

• Review and challenge IT control documentation, control designs, testing evidence, and remediation plans.

• Monitor compliance status, control deficiencies, and remediation activities.

Risk Assessment & Scoping

• Coordinate annual Business Application Risk Assessment (BARA) activities.

• Review BARA submissions and ensure completeness, consistency, and proper approvals.

• Support identification and assessment of financially relevant applications and systems.

• Maintain governance over application inventories, scoping decisions, and control applicability.

IT Projects, Migrations & Transformation Initiatives

• Coordinate the assessment of major IT projects, system implementations, migrations, SAP transformations, cloud initiatives, and other technology changes.

• Engage with project teams to ensure SOX requirements are identified early and embedded into project lifecycles.

• Monitor migration roadmaps and assess potential impacts on the control environment.

• Liaise with internal and external auditors regarding significant technology initiatives.

Compliance Frameworks & Methodologies

• Develop and maintain IT compliance methodologies, standards, procedures, guidance documents, and control frameworks.

• Support continuous enhancement of the Unified Control Framework (UCF), ITGC framework, and related governance documentation.

• Draft practical guidance on topics such as SAP governance, change management, user access management, client opening procedures, and audit readiness.

Optro / Controls Management Platform

• Support configuration, administration, and governance of the Optro internal controls platform.

• Coordinate onboarding of business units and users.

• Maintain control structures, risk mappings, user access, and reporting capabilities.

• Drive platform adoption and process standardization globally.

Audit & Stakeholder Management

• Act as a key liaison between GIC, regional compliance teams, CIOs, CFOs, Internal Audit, Group SOX & Internal Controls teams, and external auditors.

• Support audit requests, walkthroughs, testing coordination, and issue resolution.

• Prepare presentations, dashboards, executive reports, and compliance communications for senior management.

Continuous Improvement & Training

• Identify opportunities to simplify, automate, and standardize compliance activities.

• Support development and delivery of compliance awareness and training programs.

• Promote best practices in governance, risk management, and internal controls.

What will you gain?

It’s stimulating work in a supportive and diverse team environment. You’ll work with inspiring and passionate people. We’ll equip you with new capabilities. You can enrol in the ArcelorMittal University and mentoring programmes to develop new skills, knowledge, and fresh perspectives. You also have unlimited access to the ArcelorMittal Learning Platform to boost your development.

What are we looking for?

These are the things we look for. Don’t be put off if you can’t tick every box.

• Bachelor's or Master's degree in Information Systems, Information Technology, Accounting, Finance, Business Administration, Cybersecurity, or a related field.

• 3-7 years of experience in one or more of the following areas:

  • IT Compliance
  • SOX / Internal Controls
  • IT Audit
  • Risk Management
  • Information Security Governance
  • SAP Controls & Governance

• Technical knowledge - Strong understanding of:

  • SOX 404 requirements
  • IT General Controls (ITGCs)
  • IT Application Controls (ITACs)
  • User Access Management
  • Change Management
  • Segregation of Duties (SoD)
  • SAP environments and governance concepts
  • Risk and control frameworks
  • Internal and external audit processes

• Preferred Qualifications

  • CISA, CRISC, CIA, CPA, CISSP, or equivalent certification.
  • Experience with AuditBoard, Optro, Archer, ServiceNow GRC, SAP GRC, or similar governance platforms.
  • Experience working in multinational organizations.

• Key Competencies

  • Strong analytical and problem-solving skills
  • Ability to challenge and influence stakeholders constructively
  • Excellent communication and presentation skills
  • Strong project coordination and organizational abilities
  • Ability to work independently in a global, multicultural environment
  • Continuous improvement and automation mindset
  • High level of professional integrity and attention to detail

Why Join GIC?

This role provides exposure to:

• Global SOX and compliance governance

• Large-scale SAP and digital transformation initiatives

• Executive-level stakeholder engagement

• Process automation and AI-driven compliance initiatives

• International collaboration across Europe, North America, South America, Africa, and Asia

The position offers a clear pathway to develop into a senior IT Compliance, IT Audit, Governance, Risk, or Internal Controls leadership role within ArcelorMittal.