Group IT Audit Manager
- Full-time
Company Description
At SGS, we are the world's leading testing, inspection, and certification company, setting the global benchmark for sustainability, quality, and integrity. With a network of 2,650 offices and laboratories and a dedicated team of 97.000 employees, we work together to create a better, safer, and more interconnected world.
Job Description
As Group IT Audit Manager you will develop the global IT audit strategy, oversee delivery of IT audit engagements, and ensuring technology risks are effectively identified, assessed and reported across the organization. This role integrates strategic planning, stakeholder leadership, methodology ownership and hands-on execution.
Responsibilities include:
- Own the IT Audit Plan: Develop and maintain the annual and multi-year IT audit plan aligned to SGS’s risk landscape, Minimum Control Standards (MCS), digital initiatives and business strategy.
- Lead Delivery of IT Audits: Plan and execute (or oversee outsourced execution of) audits covering IT General Controls (ITGC), cybersecurity, ERP systems, cloud environments, key applications and local systems.
- Methodology & Tooling: Develop and enhance IT audit methodology, programs and templates aligned with IIA Standards and SGS Internal Audit methodology.
- Data Analytics Enablement: Define and implement the data analytics roadmap for Internal Audit, including continuous monitoring and automated data-driven testing.
- Project & Transformation Assurance: Provide assurance over major IT programs, system implementations, migrations and cybersecurity initiatives.
- Stakeholder Management: Serve as the primary liaison for technology-related assurance matters, ensuring alignment with Group IT, Group Risk Management & Internal Controls and related functions.
- Reporting & Issue Follow-up: Produce high-quality audit reports and ensure timely tracking and remediation of identified issues.
- Capability Building: Train Internal Audit staff on IT controls, cybersecurity fundamentals, ERP concepts and audit analytics.
- Risk Foresight: Monitor emerging technologies, regulatory trends and threat developments and update audit strategies accordingly.
Qualifications
Essential:
- Bachelor’s or Master’s degree in Information Systems, Computer Science, Cybersecurity, Engineering or equivalent.
- 10+ years in IT audit, information security, or technology risk management
- Proven experience leading IT audit engagements or managing an IT audit portfolio.
- Strong knowledge of ITGC, cybersecurity, ERP, cloud and data governance.
- Experience in multi-country, decentralized environments.
- Ability to influence and collaborate across technical and non-technical stakeholders.
- Excellent written and verbal communication.
Desirable:
- Relevant certifications: CISA, CISSP, CISM, CRISC, ISO 27001 Lead Auditor or equivalent
- Ability to translate technical matters into clear business implications.
- Familiarity with audit data analytics and continuous monitoring concepts.
- Strategic mindset and strong analytical reasoning.
- Professional skepticism, independence and integrity.
- Leadership and coaching skills.
Additional Information
Why SGS?
- Opportunity to work with a global leader in inspection, verification, testing, and certification.
- Collaborative and inclusive work environment.
- Competitive salary and benefits package.
- Opportunities for professional growth and development.
Join Us: At SGS, we are dedicated to fostering an open, friendly, and supportive culture that thrives on teamwork. We value diversity and provide endless opportunities to learn, grow your expertise, and fulfil your potential.