IT Compliance and Risk Manager – Brussels

Introduction

We are actively looking for an IT Compliance and Risk Manager to  work closely with the IT department of the organization in order to secure information, create, and implement strategies to minimize the variety of risks that could threaten the key information of the company.

Main Responsibilities

• Develop and lead the internal IT Risk & Compliance team and its supporting processes
• Create and maintain related policies and procedures to ensure a compliant IT environment in a multi-affiliates structure
• Develop, track, and report KPI’s relating to compliance CSV, SoX, GDPR,
• Coach and raise the awareness regarding CSV – with focus on security and data integrity
• Actively engage in end-to-end risk remediation planning, resolution, and monitoring activities.
• Ensure that IT systems and supporting IT infrastructures are validated and remains at validated state.[LD2]
• Plan/support the periodic reviews, deviations and CAPA management, Change controls related to IT.
• Collaborate with internal and external stakeholders or auditors to ensure compliance requirements are being met. (CSV, GDPR, SoX)
• Environment: S4Hana, Odoo, SAP CPI, eQMS Master Control, Laboratory systems, Scada Aveva, Sharepoint

Job qualifications, skills and experience

• Master’s degree in information technology or equivalent
• Minimum 3 years’ experience in a similar role
• Strong affinity with IT compliance & IT risk topics: CSV/GAMP5 (a must-have), SoX, GDPR, IT Security
• Strong interpersonal skills and the ability to develop effective trustworthy relationships with the QA, Legal, engineering departments and business stakeholders
• Excellent communication skills, both written and verbal
• Excellent problem solving and self-management skills
• Experience on (IT) Computer System Validation Projects, through the development/review of validation plans, user requirements specifications, configuration and design specifications, risk assessment reports, traceability matrixes, installation-operational-performance qualification protocols, validation summary reports for computerized systems.
• Experience or good understanding of the IT infrastructure Qualification activities