We are looking for a motivated IT Compliance Analyst to support our IT Governance, Risk and Compliance framework, focusing on IT General Controls (SOX), SAP authorization governance, Segregation of Duties (SoD), user access management and audit support. The role involves close collaboration with IT teams, SAP specialists, business owners and auditors to ensure IT controls are properly designed, documented, tested and improved. An excellent opportunity for professionals experienced in IT compliance, audit, risk management or SAP security.

Key Responsibilities

• Maintain and improve documentation for IT controls, policies, risk assessments and compliance activities.
• Support design, testing and enhancement of ITGCs (access, change management, IT operations and monitoring).Perform control testing, identifying gaps, risks and process weaknesses.
• Support remediation plans and prepare reports and evidence for audits.
• Contribute to IT risk assessments and mitigation actions.
• Promote compliance awareness across IT and business teams and support automation of compliance processes, access reviews and monitoring.
• Use and evaluate GRC tools for access governance, SoD analysis and reporting.
• Improve access recertification, privileged access monitoring and documentation.
• Apply frameworks such as ITIL, ISO 27001, SOX/ITGC and internal control standards.
• Support SAP authorization governance (roles, provisioning, workflows, access reviews). Collaborate with SAP teams to ensure least privilege principle and prepare SAP audit documentation using tools such as PFCG, SU01 and SUIM.
• Monitor joiner/mover/leaver processes, privileged and emergency access.
• Analyze SoD conflicts and support mitigation actions.

Requirements

• Degree in IT, Computer Science, Business Administration, Engineering or related field.
• 3–5 years of experience in IT compliance, audit, risk management, internal controls or SAP security.
• Good knowledge of ITGCs, audit methodologies and control testing.
• Understanding of SoD and authorization risk analysis.
• Knowledge of IAM, change/incident management and IT operations.
• Familiarity with ITIL, ISO 27001, SOX or similar frameworks.
• Experience with SAP authorizations, roles and user administration.
• Strong analytical, documentation and communication skills; detail-oriented and well-organized.

Nice to Have

• Certifications (CISA, CRISC, ISO 27001, SAP Security/GRC).
• Experience with Pathlock or similar tools.
• Background in multinational or manufacturing environments.
• Knowledge of compliance requirements for listed companies.
• Experience in audit remediation or IT control improvement projects.

WHAT YOU CAN EXPECT
At CFT, we are committed to ensuring equal employment opportunities and a fair, inclusive recruitment process. Candidates are evaluated without any form of discrimination, in full respect of diversity and applicable regulations. In line with our commitment to transparency, for this role we offer:

• Contract: Permanent
• Applicable collective agreement: CCNL Metalmeccanica Industria
• Compensation: expected salary range € 25,000 – € 45,000 gross per year (RAL), defined in accordance with the Metalmeccanica Industria Collective Agreement. The actual amount will be determined based on professional experience, skills, and assigned job level.
• Benefits: Smart Working, corporate welfare, and dedicated training.
• Full-time position in Italy with hybrid model. Occasional availability outside standard hours and travel depending on business or audit needs.

Additional Information