Job Information
The Sherwin-Williams Company IT Lead, Security and Controls in Cleveland, Ohio
The IT Lead, Security and Controls role will be responsible to ensure that all Cyber Security, SOX Compliance, Access Control & Provisioning, Audit Controls (RACM) related requirements are identified and satisfied for BIOS (Business Integrated Operating Systems) initiatives. The incumbent will act as a liaison between BIOS team and Cyber Security, Identity & Access Management, GPC (Global Privacy) and Internal Audit Teams. This role reports directly to the IT Dir, Oracle Platform delivery. Essential Functions Coordinates and compiles the list of Oracle Cloud Roles, Data Access Sets and Assignments by working closely with Oracle Cloud IT Functional team. Coordinates with GPC team to facilitate SOD (segregation of duties) (SOX compliance) review for Oracle Cloud Roles assignment for both Business and IT teams. Coordinates with GPC/Security team to identify SOX compliance requirements for any other boundary applications in BIOS scope. Coordinates with Identity and Access Management team to integrate IDN with Oracle Cloud and any other needed boundary applications. Coordinates with Internal Audit team and BIOS Testing Lead to ensure that all identified controls are mapped to Test Scenarios for SIT/UAT. Also ensures that appropriate evidences are captured during testing to satisfy Audit control requirements. Act as a primacy contact point from BIOS team for Cyber Security, Identity & Access Management, GPC (Global Privacy) and Internal Audit Teams to clarify any project/initiative related questions and also to help with Jira/Zephyr Scale training or assistance. Coordinates with BIOS team and Procurement team for purchase of any Printers and/or other equipments needed for the BIOS initiative at Plant, DC and other locations. Coordinates with Cyber Security team and BIOS technical team for all Custom Code scanning requirements. Coordinates with Cyber Security and Global Privacy team for any other Assessments needed for the initiative. Coordinates with Cyber Security and Global Privacy team to facilitate any training needed for new users and supports the education of end users on IT policies and procedures necessary to maintain local security compliance. The successful candidate must have strong experience supporting Security needs of a large-scale ERP implementation and must be a people leader to collaborate across various Digital Technology and Business teams. Incidental Functions Prepare and lead presentations as requested Lead internal teams/task forces on initiatives as assigned Assist with other projects as necessary to contribute to efficiency and effectiveness of work requirements Work outside the standard office 7.5-hour workday may be required. Formal Education & Certification Bachelor's degree (or foreign equivalent) in a Computer Science, Computer Engineering, or Information Technology field of study (e.g., Information Technology, Electronics and Instrumentation Engineering, Computer Systems Management, Mathematics) or equivalent experience. Knowledge & Experience 10+ years of IT experience. 10+ years of broad-based information systems or large platform/ERP implementation experience. 8+ years of demonstrated experience and success in leading and supporting Cyber Security, SOX Compliance, Access Control & Provisioning, Audit Controls(RACM) related requirements for large ERP platform implementations. Proven experience effectively communicating to business domain stakeholders and technical teams. Strong project management skills and/or substantial exposure to project-based work structures. Personal Attributes Poise and ability to act calmly and competently in high-pressure, high-stress situations. High level of personal integrity, as well as the ability to professionally handle confidential matters and show an appropriate level of judgment and maturity. Excellent listening,