mployment Contract | Full-time | Hybrid (2–3 days/week from the office) | Garching (Munich)

We're looking for an IT Risk and Controls Senior Analyst for Amer Sports' office in Garching (Munich).

Amer Sports is a global collective of iconic sports and outdoor brands, powered by a community of people who share a passion for authenticity, impact, and excellence. We bring together leading brands, talented teams, and a culture built on collaboration. If you’re looking for an environment where you can make an impact and grow your career, we invite you to explore the opportunity below.

As we scale and modernize our global technology landscape, we need a hands-on IT risk and compliance professional to help us design, govern, and continuously improve our IT control environment. In this high-visibility role, you'll work at the intersection of technology, risk, and finance — supporting our global IT SOX program across complex platforms including SAP S/4HANA, OneStream, Workday, and BlackLine — while playing an active role in shifting our controls approach from manual to automated.

What you will be doing

IT General Controls & SOX Compliance

• Collaborate with IT process and control owners on the design, implementation, and execution of IT General Controls (ITGCs) across access management, change management, and IT operations.
• Facilitate audit readiness activities and serve as a subject matter expert on SOX compliance methodology, providing real-time assessment and feedback on the state of controls.
• Support process and control walkthroughs and act as a day-to-day liaison between IT control owners and internal/external audit teams.
• Conduct pre-walkthrough preparation — including peer review of documentation and evidence gathering — to help management ahead of IT SOX walkthroughs.

Application Controls & Data Integrity

• Assess system-based controls and reconciliation processes across ERP platforms, including SAP ECC and S/4HANA, and key financial systems such as SAP GRC, OneStream, Workday, and BlackLine.
• Support the identification and documentation of segregation of duties (SoD) conflicts, configuration risks, and data integrity gaps — collaborating with control owners on remediation approaches.
• Flag control risks arising from system changes, enhancements, or new implementations to ensure timely impact assessment before go-live.

Risk Assessment & Monitoring

• Assist in ongoing IT risk and control assessments, documenting gaps across systems, interfaces, and data flows, and tracking mitigation plans through to completion.
• Perform quality assurance (QA) reviews of supporting documentation to assess control performance, providing feedback to enhance documentation quality or address identified deficiencies.
• Support management's control certification process, following up with owners proactively to ensure timely completion.

Deficiency Management & Remediation

• Provide hands-on support to IT control owners on root cause analysis, remediation planning, execution, and status tracking — driving timely closure of open issues.
• Escalate issues and dependencies to the IT R&C Senior Manager as needed.

Cross-Functional Collaboration & Continuous Improvement

• Work closely with the global Risk and Controls team and Internal Audit to maintain a strong IT control environment.
• Support cross-functional teams — including IT project teams, business teams, and consultants — in identifying and designing controls for new systems and technology solutions under development.
• Help translate complex technology and control risks into clear, business-relevant language for a wide range of stakeholders.
• Contribute to the team's continuous improvement agenda — streamlining testing approaches, improving documentation standards, and supporting the shift toward automated controls.

You will report to the IT Risk & Controls Senior Manager.

What you need to succeed

Experience & Technical Expertise

• 4–6 years of experience in IT audit, IT risk, SOX ITGC testing, or a related controls role — ideally gained in public accounting or within a global public company under US SOX regulation.
• Working knowledge of ITGC frameworks and their application in SOX compliance, covering access management, change management, and IT operations controls.
• Hands-on experience with ERP systems, preferably SAP, including familiarity with user access concepts, segregation of duties, and configuration risk.
• Familiarity with control automation and reporting tools