GRC Junior (m/f/d)

Syntax is a leading Managed Cloud Provider for Mission Critical Enterprise Applications and has been providing comprehensive technology solutions to businesses of all sizes since 1972. Syntax has undisputed strength to implement and manage ERP deployments (Oracle, SAP) in a secure and resilient private, public or hybrid cloud. With strong technical and functional consulting services, and world-class monitoring and automation, Syntax serves some of North America’s largest corporations across a diverse range of industries. Syntax has offices worldwide, and partners with Oracle, SAP, AWS, Microsoft, IBM and other global technology leaders.

GRC Associate (m/f/d)

Syntax’s Governance, Risk and Compliance (GRC) function is looking for a new/recent graduate to join as an GRC associate (m/f/d).  We are looking for someone who will thrive in complex and diverse work environment to join a team of high performing professionals. The selected individual will have the opportunity to be heavily involved in various GRC projects and have direct interaction with various functions at Syntax.  

Recent graduates are welcome to apply.

The associate will be involved in (but not limited to) the following activities:

• Regulatory Compliance: Support compliance efforts with ENS (Spanish Security Regulations) and other relevant standards. Monitor emerging and changing regulations and support the implementation of new compliance obligations.
• ISO 27001 Management System: Assist in auditing and maintaining the ISO 27001 Management System, ensuring continuous improvement and compliance with information security standards.
• Quality Management System Support: Support the audit and maintenance of the Quality Management System, contributing to organizational excellence.
• Control Walkthroughs: Coordinate and facilitate control (IT, business process, security, etc.) walkthrough meetings with process owners from each business unit and external auditors.
• Service Offerings Compliance: Assist the Director/Manager on compliance matters related to our service offerings and support account managers in addressing customer concerns related to governance and compliance matters.
• Audit Project Management: Assist in managing the execution and completion of external audits for SOC1 and SOC2 audits, and escalate issues identified in a timely manner.
• Stakeholder Liaison: Collaborate with key stakeholders across various business functions to obtain a detailed understanding of control processes, create end-to-end process narratives, process maps, and execute test procedures.
• Control Weakness Assessment: Identify and report control weaknesses, objectively assess their severity and materiality, and communicate the potential impact on Syntax’s business clearly and professionally.
• Research and Trends: Conduct research on emerging audit and risk-related issues, trends, and methodologies to assess their impact on Syntax’s business and implications for internal audits.
• Internal Audit Coordination: Work directly with the Director/Manager of GRC/Internal Compliance to execute a risk-based internal audit plan, evaluating the design and operations of internal controls over Syntax’s IT systems and financial and operational processes, including audits according to BAIT or EU Banking Regulations.
• Governance and Policy Management: Support the review, maintenance and communication of corporate policies, standards, procedures, and control documentation. Coordinate periodic reviews and approvals with policy owners and management.
• Risk management: Assist in identifying, assessing, documenting, monitoring, and tracking information security, operational, and compliance risks. Maintain the risk register and support the development and tracking of risk mitigation and remediation plans.

 What you will bring:

• Bachelor’s degree in accounting, business administration, or relevant degree
• Enrollment into CPA program or CISA and ISO 27001 Auditor preferred
• Knowledge of IT Technology for Data Center and Cloud (AWS, Azure, Google)
• Knowledge of ITIL tailored to ISO 20.000-1  
• Knowledge of ISO 27001, ISO 9001, ENS, TISAX, BAIT, DORA, C5  Standards
• Experience working with audit and compliance tools (e.g. Eramba) would be preferred
• Critical thinking and strong analytical skills to evaluate areas of risks and develop appropriate solutions
• Excellent communication skills (verbal and written) and be able to present confidently to various key stakeholders across the company
• Be able to work independently in a remote setting and effectively prioritize multiple tasks with competing deadline

Additional mandatory requirements:

Nationality or Work Authorization: Spanish or Portuguese nationality, or alternatively a permanent work permit/VISA for Spain or Portugal.