SOX Officer – ITGC Lead

About the role

The SOX Officer will lead and independently manage the local SOX IT General Controls (ITGC) program for ArcelorMittal Luxembourg, aligning it with the global SOX framework. This position acts as the primary liaison between the global IT compliance team, local IT, and business units.

Key responsibilities

• Lead the local SOX ITGC program and ensure alignment with the global SOX requirements.
• Coordinate with ArcelorMittal Global IT Compliance, Global Assurance, and local IT teams on all SOX‑related issues.
• Provide timely status reports to global and local management, and produce periodic portfolio and mitigation updates.
• Identify gaps, develop quick mitigation plans, and supervise urgent SOX actions involving multiple teams.
• Optimize SOX IT General Controls processes and advise on best practices.
• Conduct periodic risk assessments, scope activities, and maintain the ITGC Risk Control Matrix (RCM) with control descriptions and testing procedures.
• Organise and monitor internal SOX ITGC testing phases (ToD, ToE, RF) and manage remediation of identified gaps.
• Plan, organise, and coordinate external SOX ITGC audits, ensuring adherence to the group compliance calendar.
• Facilitate regular meetings and status updates with external auditors to discuss findings and remediation plans.

Required profile

• Proven experience leading SOX ITGC programs and managing compliance initiatives.
• Strong ability to coordinate with global compliance, local IT, and business stakeholders.
• Excellent reporting skills with a focus on delivering clear status and mitigation updates.
• Experience conducting risk assessments, control testing, and managing audit processes.

Required skills

• SOX ITGC
• Risk Control Matrix (RCM) management
• IT audit testing (ToD, ToE, RF)