Audit and Risk Manager (IT) Job ID: REF93821P

Job Description

• To assist and consult on all IT Audit and Regulatory Compliance at all IT levels within ContiTech.
• Provide project management to implement complex compliance strategies.
• To act as a liaison between internal ContiTech IT Teams and external audit/internal audit authorities.
• To provide strategies for the following regulatory topics but not limited to: IATF, TISAX, PWC, DPO (IT Data Protection), and Internal Audit.
• Coordination of all regulatory certification efforts related to ContiTech Group Sector with link to IT.
• Maintain managed document requirements in IT Library related to IT audits.
• Provide a knowledge base platform for audit topic to include:
  • Audit focus areas
  • Deficiency listing with tracking and reporting
  • and IT Audit Calendar.
• Provide independent review processes for any control needs related to applications in Internal Control System (ICS/RMS).
• Provide Risk Management System (RMS) Coordination and risk reporting process.

Additional Information

At Continental we are committed to building an inclusive and discrimination‑free ecosystem in Mexico, these principles are rooted in our corporate philosophy and culture. Therefore, it is totally forbidden to request a pregnancy or HIV test as part of our selection processes.

Qualifications

Education: Degree (Bachelor, Master) in Finance, Business Administration, Quality, Engineering or alike, preferably with enhanced knowledge in regulations, auditing.

• minimum 5yrs in the field/industry (B2B with OEM quality audits, TISAX, IATF ISO 16949, ISO 27001)
• Experience with external audit teams is a big part of the job, so comfort with dealing with regulatory differences and how to overcome those is needed.
• Languages: English C1; German optional

Knowledge:

The position requires a knowledge of basic security, ITGC, ITAC, privacy, financial, and other regulatory related laws to perform the tasks.

These laws change and differ from continent, country, and functional area, and the ability to research and interpret laws quickly is a must.

It is best if an audit background exists to quickly interpret and understand best practice guidance.

SOX or NIST background is a must.

Understanding of risk analysis and assessment is a must.

Additional Info:

Most of the time the job crosses multiple IT organizational levels, BU's within the division, and business functional areas.

It is important that good project management and organizational practices are maintained.

The job requires the need to adapt and come up with quick designs to implement.

Out of the box thinking is required. Ability to communicate with multiple management levels is required.

Experience with external audit teams is a big part of the job, so comfort with dealing with regulatory differences and how to overcome those is needed.