At JTI we celebrate differences, and everyone truly belongs. 46,000 people from all over the world are continuously building their unique success story with us. 83% of employees feel happy working at JTI.
To make a difference with us, all you need to do is bring your human best.
What will your story be? Apply now!
Learn more: jti.com
IT Controls Manager
What this position is about - Purpose:
Primary responsibilities of the "IT Controls Manager" are the ongoing maintenance and improvement of JTI's global internal controls framework, including IT controls. As a Japanese-listed multinational Company, JTI must comply with JSOX (Sarbanes Oxley equivalent) reporting; which requires managing the overall JSOX control framework (Finance and IT controls), performing self-assessment processes, liaising with internal & external auditors and remediating any issues highlighted.
The role reports directly to JTI HQ and the work demands a substantial understanding of IT processes. Regular cross-functional collaboration with all levels of management will be required to perform the role effectively.
Furthermore, the individual will also support the wider Corporate Controlling Team with Agile Project Support.
What will you do - Responsibilities:
IT Controls Design – lead the design and implementation of IT Security controls across the organization, ensuring alignment with JSOX requirements and boarder Corporate Policies and ProceduresAccess Management – oversee the controls related to access management, including provision, deprovisioning, and monitoring user access to ensure proper Segregation of Duties and prevent unauthorized accessChange Management – manage IT change management controls to ensure that all changes to IT systems, application, and infrastructure are reviewed, approved, and documented in compliance with JSOX and IT PoliciesOperational controls – ensure operational IT controls are in place to support day-to-day function, including regular monitoring, backup processes.Segregation of Duties – manage Segregation of Duties ruleset for SAP and non-SAP systemsControl Assessment – oversee internal processes related to management self-assessment of internal security controls and JSOX remediation processJSOX Compliance – conduct comprehensive reviews of projects to ensure that they adhere to JSOX and IT control requirements.Collaboration – work with cross-functional teams including Information Security, Identify and Access Governance, SAP Functional Consultants, Compliance, IT JSOX Coordinators, and External and Internal Auditors to ensure that security and control framework are integrated into day-to-day operations.Reporting - preparation of the presentations and reports for Senior Management based on the obtained requirements
Who are we looking for - Requirements:
Are independent, structured, and process-oriented person with strong self-confidence and good communication skillsHave an analytical mindset with excellent prioritization and time, self-management skillsHave a University Degree in relevant fieldUnderstanding of security frameworks (ISO 27001, NIST, COBIT, etc.)Familiarity with ITIL practices,Experience in managing internal and external audits and providing control evidence.Professional Qualification is a plus (CISA, CISM, CRISC, CISSP, CC, CIA, ITIL)Have at least 5 years of work experienceHave confidence with Excel and at least basic knowledge about BI applicationAre fluent in English (written and verbal). Any other language is an assetHave a proficient knowledge of SAP Security or SAP Function module on-hand experience is requireWhat we offer:
Competitive pay and attractive annual bonusOn-going development opportunities in multinational environment, wide variety of projects, ambitious goals and independence in achieving them. Promoting from within cultureFreedom with responsibility (we trust your competencies, ability to manage your time and your scope of work)Lot of flexibility in terms of work arrangements (work from office or from home)Private medical care (various options to choose) and life insuranceEmployee pension and savings programsJTI Family Leave Benefit – including extended paid paternity leave and fully paid maternity leaveMultisport card, foreign languages classesWide variety of trainings, webinars and professional courses on our e-learning platforms, including sponsored certification programs (for employees fulfilling the admission criteria)Modern office with traditions (Art Norblin Factory) in convenient location, equipped with a library, mindfulness zone, spacious kitchen, garden terrace, massage chairs and underground bicycle parkingWorking in a diverse and inclusive organization of over 40 different nationalitiesAre you ready to join us? Build your success story at JTI. Apply now!
Next Steps:
After applying, if selected, please anticipate the following within 1-3 weeks of the job posting closure: Phone screening with Talent Advisor > Assessment tests > Interviews > Offer. Each step is eliminatory and may vary by role type.
At JTI, we strive to create a diverse and inclusive work environment. As an equal-opportunity employer, we welcome applicants from all backgrounds. If you need any specific support, alternative formats, or have other access requirements, please let us know.
JTI GBS Poland Sp. z o.o. has introduced an Internal Reporting Procedure for Whistleblowers. If you would like to review this procedure, it is available upon request.
If you decide to participate in this recruitment, the administrator of your data will be JTI GBS Poland sp. z o.o. with headquarters in Warsaw. Your data will be processed only to support the recruitment process in which you participate. Detailed information on the processing of your data here.