Risk & Control Senior Analyst (m/f/d)

Risk & Control Senior Analyst (m/f/d)

Employment Contract | Full-time | Hybrid | Kraków

We're looking for an IT Risk and Controls Senior Analyst for Amer Sports' office in Garching (Munich).

Amer Sports is a global collective of iconic sports and outdoor brands, powered by a community of people who share a passion for authenticity, impact, and excellence. We bring together leading brands, talented teams, and a culture built on collaboration. If you’re looking for an environment where you can make an impact and grow your career, we invite you to explore the opportunity below.

As we scale and modernize our global technology landscape, we need a hands-on IT risk and compliance professional to help us design, govern, and continuously improve our IT control environment. In this high-visibility role, you'll work at the intersection of technology, risk, and finance — supporting our global IT SOX program across complex platforms including SAP S/4HANA, OneStream, Workday, and BlackLine — while playing an active role in shifting our controls approach from manual to automated.

What you will be doing

IT General Controls & SOX Compliance

• Collaborate with IT process and control owners on the design, implementation, and execution of IT General Controls (ITGCs) across access management, change management, and IT operations.
• Facilitate audit readiness activities and serve as a subject matter expert on SOX compliance methodology, providing real-time assessment and feedback on the state of controls.
• Support process and control walkthroughs and act as a day-to-day liaison between IT control owners and internal/external audit teams.
• Conduct pre-walkthrough preparation — including peer review of documentation and evidence gathering — to help management ahead of IT SOX walkthroughs.

Application Controls & Data Integrity

• Assess system-based controls and reconciliation processes across ERP platforms, including SAP ECC and S/4HANA, and key financial systems such as SAP GRC, OneStream, Workday, and BlackLine.
• Support the identification and documentation of segregation of duties (SoD) conflicts, configuration risks, and data integrity gaps — collaborating with control owners on remediation approaches.
• Flag control risks arising from system changes, enhancements, or new implementations to ensure timely impact assessment before go-live.

Risk Assessment & Monitoring

• Assist in ongoing IT risk and control assessments, documenting gaps across systems, interfaces, and data flows, and tracking mitigation plans through to completion.
• Perform quality assurance (QA) reviews of supporting documentation to assess control performance, providing feedback to enhance documentation quality or address identified deficiencies.
• Support management's control certification process, following up with owners proactively to ensure timely completion.

Deficiency Management & Remediation

• Provide hands-on support to IT control owners on root cause analysis, remediation planning, execution, and status tracking — driving timely closure of open issues.
• Escalate issues and dependencies to the IT R&C Senior Manager as needed.

Cross-Functional Collaboration & Continuous Improvement

• Work closely with the global Risk and Controls team and Internal Audit to maintain a strong IT control environment.
• Support cross-functional teams — including IT project teams, business teams, and consultants — in identifying and designing controls for new systems and technology solutions under development.
• Help translate complex technology and control risks into clear, business-relevant language for a wide range of stakeholders.
• Contribute to the team's continuous improvement agenda — streamlining testing approaches, improving documentation standards, and supporting the shift toward automated controls.

You will report to the IT Risk & Controls Senior Manager.

What you need to succeed

Experience & Technical Expertise

• 4–6 years of experience in IT audit, IT risk, SOX ITGC testing, or a related controls role — ideally gained in public accounting or within a global public company under US SOX regulation.
• Working knowledge of ITGC frameworks and their application in SOX compliance, covering access management, change management, and IT operations controls.
• Hands-on experience with ERP systems, preferably SAP, including familiarity with user access concepts, segregation of duties, and configuration risk.
• Familiarity with control automation and reporting tools, including BlackLine, RPA (Bots), SAP GRC, SAP Business Warehouse, and SAP Datasphere.

Skills & Personal Attributes

• Detail-oriented, with strong documentation and communication skills — able to present findings and recommendations clearly to both technical and non-technical audiences.
• Strong analytical and problem-solving mindset, with the ability to think critically and connect the dots across people, processes, and systems.
• Comfortable working across time zones in an international, cross-functional environment.
• A collaborative team player with a strong sense of ownership, intellectual curiosity, and genuine motivation to create impact.

Languages

• Fluency in English is required.

Education

• A degree in Information Systems, Accounting, Finance, or a related field is strongly preferred.

• What we consider a plus

• German or Polish language skills.

• CISA, CRISC, or CIA certification — or active progress toward any of these.

• What’s in it for you

• At Amer Sports, you’ll be part of a global community of people who care about what they do and how they do it. Across our teams and brands, we are driven by ambition, collaboration, and a shared purpose of elevating the world through sport.

• Flexibility: Choose how you work best with flexible hours and hybrid work options, and take time to contribute beyond your day-to-day role with two additional paid volunteer days.

• Health & active lifestyle support: Stay active and take care of your wellbeing with private medical care, MyBenefit cafeteria platform, well-being initiatives, and opportunities to join company sports activities.

• Employee benefits: Benefit from employee discounts on quality products from our iconic brands, a cafeteria benefits platform, life insurance, holiday subsidies, and convenient office perks.

• Learning and development support: Grow your skills and confidence with financial support for education, professional courses, certifications, development opportunities, and language learning.

• Global collaboration: Work with diverse, international teams and collaborate across brands, functions, and markets, learning from different perspectives along the way.

• Access to a global network of leading brands: Work within a global collective of iconic sports and outdoor brands, gaining exposure to different businesses, perspectives, and opportunities across Amer Sports.

• We're in the game together: Join a culture built on trust, support, and shared responsibility, where progress is achieved together and success is celebrated as a team.

• Purpose-driven environment: Be part of work that supports healthier, more active lives through our iconic sports and outdoor brands.

• Small teams, real impact: Contribute in small, trusted teams within a global company, where your ideas matter and your work can create real impact.

• Excellence in how we work: Join an environment where quality, innovation, and continuous improvement matter, and where people are encouraged to raise the bar in how work is done.

• Ambitious career development: Develop your skills through meaningful work, new challenges, and collaboration with experienced colleagues.

• Modern technologies and ways of working: Be part of teams that work with modern technologies and continuously evolve how we build, operate, and improve our digital solutions.

• IT: At Amer Sports, IT professionals have the chance to work on cutting-edge projects and implement advanced technologies, driving progress in a globally recognized company with prestigious brands.

• What to expect from the recruitment process

• CV screening: Every CV is reviewed by a human.

• Phone screening: A conversation with Amer Sports’ Talent Acquisition Team to discuss the role, our organization, and your expectations.

• Case Study: During the interview round, case study questions / scenarios may be asked to gauge your experience and responsiveness to real-world scenarios that we face at Amer. This will give you a chance to demonstrate your knowledge of critical concepts. If selected for the interview, case studies will shared in advance of the meeting.

• Interviews: 3-4 interview rounds, where you'll meet the hiring Manager (IT R&C Senior Manager), R&C Director, and other cross-functional team members (as needed) for in-depth conversations about the role and your experience.

• Feedback and decision: We aim to provide feedback throughout the process.

• Interested?

• Please submit your application via the application fo