Already an employee? You must apply through our internal portal: click here

Sr IT Security Control Assessor

Date:  Mar 17, 2026
Location: 

Bucharest, RO

Company:  MolsonCoors_GBSRomania

Requisition ID: 38041 

Molson Coors is a leading brewer with 18,000+ employees, 30+ breweries and 130+ beer brands, consumed in more than 50 countries. Our GBS history in Romania started in 2017, when Molson Coors Global Business Services was established in Bucharest, and since then we have become a 650 people strong organization and growing continuously.

 

We deliver centralized operations to our Molson Coors Business Units across the Globe in Finance, Master Data, Commercial, HR and IT Business Services. Our impressive brands portfolio across the world includes Miller Genuine Draft, Madri, Staropramen and Bergenbier.

 

The Sr. IT Security Control Assessor plays a critical role in safeguarding the organization’s technology environment by ensuring the effective implementation and monitoring of IT controls across SAP and other enterprise systems. This role is deeply rooted in regulatory compliance, with a strong emphasis on SOX and IT General Control (ITGC) frameworks, and is instrumental in maintaining audit readiness, driving control remediation, and supporting continuous improvement initiatives. 

 

Operating with a high degree of autonomy, the specialist is responsible for managing 25 of the organization’s IT General Controls (ITGCs), partnering closely with IT leaders and control owners to ensure control effectiveness and timely remediation of deficiencies. The role collaborates extensively with internal stakeholders - including IT operations, finance, and audit teams, as well as external service providers to ensure control effectiveness, compliance with evolving regulatory standards, and integration of security into business processes.  

In addition to SAP governance and enterprise risk management, the role is a key contributor to the organization’s cybersecurity posture through active involvement in the NIST Cybersecurity Framework (CSF) 2.0 controls program. This includes aligning IT control activities with NIST principles, identifying gaps, and supporting the implementation of best practices across the Identify, Protect, Detect, Respond, and Recover domains. 

 

KEY RESPONSIBILITIES:

  • Manages assigned IT General Controls (ITGCs) within the global control framework – Independently oversees 25 of the organization’s ITGCs, ensuring controls are appropriately designed, implemented, and maintained in alignment with SOX, NIST CSF, and internal standards. 

  • Partners on compliance readiness for assigned controls – Collaborates with the IT Compliance Program Manager, Internal Audit, and control owners to ensure assigned controls are properly documented, implemented, and supported with appropriate evidence for audit and regulatory review. 

  • Develops and manages remediation plans – Identifies control deficiencies, facilitates root cause analysis, and partners with IT and business teams to develop and track remediation plans. Ensures sustainable resolution and prepares for re-testing. 

  • Supports control development and enhancement – Assists in the design and refinement of IT controls for new systems, processes, and technologies. Provides input to ensure controls are scalable, effective, and aligned with enterprise risk objectives. 

  • Provides compliance reporting and insights – Prepares reports and dashboards for management and auditors, highlighting control effectiveness, remediation status, and emerging risks. 

  • Collaborates cross-functionally and mentors/coaches staff – Builds strong relationships with IT leaders, control owners, and compliance peers. Provides guidance and informal mentorship and coaching to team members. 

 

SKILLS & RELEVANT WORK EXPERIENCE:

  • Bachelor's degree in Information Technology, Computer Engineering, or a related field, or equivalent experience (4+ years) in IT Audit, Compliance, or Risk Management. 
  • Strong understanding of SOX, NIST CSF, and ITGC frameworks; 

  • SOX Control Auditing or SAP Security; 

  • Experience managing controls in SAP or similar ERP and hybrid IT environments; 

  • Effective communicator with strategic thinking capabilities; 

  • Ability to work independently while aligning with broader program goals; 

  • Skilled in control testing, documentation, and remediation planning; 

  • High attention to detail and commitment to compliance excellence; 

  • Ability to mentor/coach staff and foster a collaborative team environment; 

  • CISA, CRISC or equivalent certifications. 

 

#LI-Hybrid 

 

 

Molson Coors is an equal opportunity employer.  We invite applications from candidates of all backgrounds, race, color, religion, sex, national origin, age, disability, veteran status or any other characteristic. If you have a disability and believe you need a reasonable accommodation during the application or recruitment processes, please e-mail jobs@molsoncoors.com.