IT Compliance Manager - SOX

At Ericsson, you can be a game changer! Because working here isn’t just a deal. It’s a big deal. This means that you get to leverage our 140+ years of experience and the expertise of more than 95,000 diverse colleagues worldwide. As part of our team, you will help solve some of society´s most complicated challenges, enabling you to be ‘the person that did that.’ We’ve never had a greater opportunity to inspire change; setting the bar for technology to be inclusive and accessible; empowering an intelligent, sustainable, and connected world

Our Exciting Opportunity

Do you want to JOIN and be a part of Ericsson SOX Framework Compliance Team?

If you can drive continuous development and improvement project coordination activities within BMAS Group IT for the alignment of the current and evolving SOX framework? If you have passion for the protection of information assets accessed through the Ericsson IT environment by providing IT security operations, expertise, support, and solutions; Based on the IT Security Guiding Principles and enable compliance with applicable internal/external requirements, laws, regulations and standards. And If you Would you like to work with an engaged team of SOX compliance professionals?

Then we have the challenge for you!

What will make a difference for us is your personality, your ability to collaborate, learn, influence and lead. You will work closely together with our Supplier’s and various teams within Group IT-Ericsson as a part of the BMAS GIT T&O BO Process Risk & Comp Management team. Leadership and self-motivation will be key, along with the ability to see opportunities for continuous improvement and change.

Our team is contributing in shaping the future of Ericsson security by reviewing, enhancing, implementing, and driving the key security frameworks, Most Importantly- the Sarbanes-Oxley Section 404 (Others includes Privacy, ISMS etc.). We are looking for a true leader who will join our team on a mission to protect Ericsson’s people, assets, and values!.

• We believe in trust – we trust each other to do the right things!
• We believe in taking decisions as close to the product and technical expertise as possible.
• We believe in creativity – trying new things and learning from our mistakes.
• We believe in sharing our insights and helping one another to build an even better user plane.
• We truly believe in happiness, we enjoy and feel passionate about what we do and value each other’s technical competence deeply

You will,

• Report into the Head of T&O Process Risk & Compliance Management.
• Abide by Code of Conduct guidelines and comply with all the existing/updated/ New policies and processes as applicable within BMAS Group IT and ERICSSON.
• Support and coordinate within Group IT, as required to Define scope of SOX Key Controls and applications.
• Ensure Timely reporting of Controls Self-Assessment’s (CSA’s); Their Reviews & Sign-Off by IT Leadership in Governance, Risk and Compliance (GRC) Tool.
• Assign the Remediation Plans for the Non-Compliances for the CSA’s and their Follow-ups.
• Organize & execute Management Independent Testing of SOX Key Controls (KC) by the Corporate Audit Team.
• Responsible to coordinate and assist in the External Audits within Group IT.
• Drive the closure of all the Non-compliances reported during assessments, Observations and Audit Findings from Internal or External Audits.
• Report the progress updates for projects and non-compliances to the Management on periodic basis.
• Report and Drive the SOX related controls-based Risks within the Organization.
• Establish effective Governance forums and Coordinate with Ericsson Suppliers for achieving the compliance as per SOX Framework Requirements.
• Responsible for accurate and timely execution of various SOX Operational Tasks and routine activities.

. To be successful in this role, you must have:

• Bachelor’s degree or equivalent
• Total work experience: 7-10 years of IT experience
• Domain experience (More than 3 Years): SOX, ISMS Controls, SOC Type II Reports and EGMS
• Certifications related to SOX and other similar like CISA, CISSP, CISM, ISO27001 lead implementer/Auditor
• Experience in the handling of Regulatory and Information Security-based Audits either as an auditor or auditee

Key Qualifications:

• Strong knowledge on the IT and Information security Key Controls (KC), their assessments, potential Risks, compensating controls and Handling of Exemptions.
• Effective collaboration skills to interact with various stakeholders during Audits required to gather Information as per Information Requests, Evidences or Information’s needed for concluding the effectiveness or Gaps in controls or Framework.
• Strong leadership skills to lead and inspire a variety of stakeholders to contribute to a successful implementation of the SOX Key Controls.
• Engagement with Ericsson Leadership and other key stakeholders required to achieve the compliance as per SOX KC framework.
• Well-developed skills to educate and train process practitioners, facilitate workshops, and raise the overall awareness of SOX ITKC across BMAS Group IT
• Structured and analytic, sets and anchors direction and continuously evaluates progress and amendments needed based on data and measurements.
• Drives strategic improvements and operational effectiveness independently.
• Excellent communications skills, proactively reaching out to senior Ericsson/Supplier stakeholders within and outside Group IT

What’s in it for you?

With over 90,000 employees across 180+ countries, we have a culture that respects and supports your ambitions, in alignment with our values of Respect, Professionalism and Perseverance. Ericsson is very passionate about learning and development, supports mobility and flexible working hours. We are also committed to diversity and inclusion and to be a responsible and relevant driver of positive change. We also offer some awesome benefits, amazing career development and training programs to provide an empowered career in a connected world.

What happens next once you apply?

Read about the next steps here. For your preparation and reference, here is our overall Brand video and some insights about our innovations in 5G

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation

Do you believe that an organization fostering an environment of cooperation and collaboration to execute with speed creates better business value? Do you value a culture of humanness, where fact based decisions are important and our people are encouraged to speak up? Do you believe that diverse, inclusive teams drive performance and innovation? At Ericsson, we do.

We provide equal employment opportunities without regard to race, color, gender, sexual orientation, transgender status, gender identity and/or expression, marital status, pregnancy, parental status, religion, political opinion, nationality, ethnic background, social origin, social status, indigenous status, disability, age, union membership or employee representation and any other characteristic protected by local law or Ericsson’s Code of Business Ethics