IT Security & Compliance Manager - Madrid Office
Sinclair, a global medical aesthetics company, is hiring an IT Security & Compliance Manager for its Madrid office. Day to day, this person owns external and internal IT audit response, builds and operates IT general controls from audit findings, runs user access reviews and segregation-of-duties in the ERP (SAP), maintains IT policies, and reviews vendors and data protection for systems.
- Compensation
- Not disclosed
- Location
- San Fernando de Henares, ES
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- Not specified
- Category
- Security
- Posted
Must have
- Five or more years in IT audit, IT compliance or IT risk, within or facing a multi-entity international group
- Has personally run the company side of an IT audit (scope, evidence, management response, remediation to closure)
- Has built and operated IT general controls based on findings, not only tested them
- Has owned a user access review and segregation-of-duties cycle across an ERP
- English to full professional standard, written and spoken
- Right to work in the Netherlands or Spain
- Able to work as the only person in the discipline: sets own priorities and writes own material
- Experience in ITGC, SoD and ERP controls
Nice to have
- CISA, CRISC, or ISO/IEC 27001 Lead Auditor certification
- Pharmaceutical, medical device or medical aesthetics experience, including GxP and computerized system validation (CSV)
- SAP authorisation concept and segregation-of-duties design
- UK and EU data protection as it applies to systems and vendors
Full description
Sinclair is Hiring! Join Our Team as a IT Security & Compliance Manager 🚀
We are currently recruiting for IT Security & Compliance Manager at our Madrid office.
The ideal candidate will have experience in:
- ITGC
- SoD
- ERP Controls
Location: SpainAbout Sinclair
Founded in 1971, Sinclair is a global medical aesthetics organisation, that delivers an extensive product range. With an in-house commercial infrastructure, including manufacturing and a network of distributors in leading global markets, our products are sold in 55 countries worldwide.
This is a great time to join Sinclair as we continue to increase our product range and expand into new markets and territories.
Sinclair Values:
✅ Act with Integrity Consistently doing the right thing even when it’s the hard choice; 100% Compliance with all rules, standard operating procedures and guidelines
✅ Results-Driven Make a business impact in all you do, whether sales, efficiency, operational excellence; it should make a meaningful impact
✅ Innovation-Centered Redefining Aesthetics, we must be pioneering in how we do business; this can be in products, in service models, or strategy
✅ One Company, One Goal Working towards unified mission, we are all Sinclair and be seen by customers as one company in every way
✅ Own It! Be Accountable for your decisions, actions and consequences; Be Reliable to your customers and colleagues
What You'll Be Doing:
🔹 Audit response and readiness — primary
- Act as the single point of contact for external audit, group internal audit and finance control reviews: scope agreement, evidence, walkthroughs, management responses.
- Maintain one register of IT-related findings from every source, each with a named owner and a date.
- Report remediation status monthly to the Global IT Director, and at each audit cycle to Finance and to Legal & Compliance.
- Assemble the evidence base before it is asked for: application inventory, system owner matrix, access records, change records, backup and restore records.
🔹Internal controls, built from audit requirements
- Turn each agreed finding into a documented, repeatable control: control objective, control owner, frequency, evidence retained.
- Start with what is already known to be required — periodic user access review; segregation of duties in ERP and procure-to-pay; a named System Owner for every application.