Internal Controls IT Compliance Specialist

**How will you CONTRIBUTE and GROW?**:
Air Liquide's Business Service Center (BSC) comprises a dedicated unit (including people, processes and technologies) that is structured as a centralized point of service focused on defined business functions. Initially the BSC will support the North America (‘NAM’) cluster and will take on support of the Latin America (‘LATAM’) cluster in a later phase.

Air Liquide's Shared Services workforce is a dedicated team of people who provide services that have previously been found in more than one part of the organization or group; thus, the funding and resourcing of the service is shared and the providing department effectively becomes an internal service provider.
- Support North and South America's Zone Information Security Officer (ZISO) & Internal Controls Director in developing, implementing, enforcing and improving the Zone's IT Compliance Programs to include any programs protecting data or protecting systems; including PII, PHI, and PCI or systems in regulatory programs
- Work with ZISO, Internal Controls Director, IT and the business to assess, report and respond to audit findings, compliance responses and incidents for an international industrial manufacturing company
- Assess and report on compliance to ZISO, IPC, and the business for functional corporate compliance programs and IT and industrial technology (Industrial Control Systems) projects, programs and operations
- Engage the business to ensure compliance activities are prioritized, addressed prior to audit visits
- Track open IT audit findings or compliance deficiencies to ensure prompt resolution and risk mitigation
- Provide advisory support to corporate/business via the ZISO/ Internal Control Director office on Governance, Risk Management, Compliance (GRC) and CyberSecurity
- Collaborate with IT Security Risk Manager and business in providing coordinated risk and compliance security assessments and participating in reporting risk metrics and roadmaps
- Work cross functionally and confidently to drive compliance and improvement in compliance areas
- Conduct all phases of assessments, inquiry preparations and policy enforcement reviews to include auditing and assessing software and IT systems for compliance programs/standards
- Assess exceptions and risk acceptance for violations of compliance programs or policies and standards
- Drive improvements in IT controls and solutions to bring efficiencies to compliance programs
- Engage in audit and compliance reporting, planning and review sessions with IT Security Risk Manager to determine impact of findings and management action plans
- Participate in enforcement process of compliance standards, policies and procedures
- Monitor key regulatory and industry cyber-security standards environments (FDA, NERC CIP, DHS, PCI, HIPAA, PII, EU Safe Harbor, DOT) for impact on corporate compliance programs/initiatives
- Perform research on best practice IT security, risk and compliance standards/technologies
- Escalate newly identified CyberSecurity compliance related issues or concerns to ZISO/Internal Controls Director

**__________**:
**Are you a MATCH?**:

- Bachelor's degree appropriate to risk and compliance management fields or equivalent work experience
- Minimum of 2 years in an IT type field
- Between 2 and 4 years of IT audit experience, preferably in Big 4.
- Strong background in IT audit, security assessments and risk based standards programs
- Project management and organizational skills with evidence of success
- Excellent communication and relationship skills; ability to lead, advise or collaborate with a wide range of personnel from engineering technicians to corporate executives
- Excellent verbal and written communication skills
- Personify solid integrity, ethical character traits and strict controls of confidential information
- Sound knowledge of a broad range of IT related processes and concepts
- Experience with GRC tools and PCI compliance is a plus.
- Self motivated; ability to achieve objectives with mínimal supervision
- IT security or audit certification(s) a plus; examples include CISA (Certified Information Systems Auditor), CRISC (Certified Risk Information Systems and Controls) is a plus

**Our Differences make our Performance
**At Air Liquide, we are committed to build a diverse and inclusive workplace that embraces the diversity of our employees, our customers, patients, community stakeholders and cultures across the world.