Risk & Compliance Manager - IT General Controls - Gdańsk

Join our global Risk and Compliance team in Gdańsk and play a key role in protecting Arla’s assets and strengthening the reliability of financial and ESG reporting. In this role, you will combine a broad financial risk and compliance perspective with a particular focus on IT General Controls, financially relevant systems, Segregation of Duties and collaboration with external auditors. You will work across Finance, IT and business operations to strengthen Arla’s global control environment and support sustainable risk mitigation.

How you will make an impact

As Risk & Compliance Manager, you will help identify and mitigate fraud, financial reporting and technology-enabled risks across Arla’s processes and systems. You will coordinate and support IT control activities relevant to the annual Group audit, facilitate effective dialogue between external auditors and internal stakeholders, and help ensure that appropriate controls are designed, implemented and operated effectively.

This is NOT a financial crime compliance role focused on KYC, AML, sanctions or customer due diligence. The position focuses on financial risk mitigation, internal controls, IT General Controls and the integrity of reporting in a global production and consumer goods company.

Specifically, you will

• Drive risk assessments across processes, countries and systems, with particular focus on fraud, financial reporting and technology-enabled financial risks

• Coordinate and support the IT General Controls element of the annual Group audit for systems relevant to financial and ESG reporting, including scoping, walkthroughs, evidence coordination, testing support and remediation follow-up

• Facilitate constructive collaboration between external auditors, IT, Finance, business process owners and other internal stakeholders regarding IT controls and audit findings

• Assess and support improvement of IT General Controls, including user and privileged access, change management, IT operations, interfaces, automated controls and relevant third-party service controls

• Support evaluation and remediation of Segregation of Duties and critical access risks, including development of practical mitigating controls in collaboration with business and IT access management teams

• Conduct risk-based compliance reviews, monitor corrective actions and minimum control requirements, and identify opportunities for continuous monitoring, data analytics and control automation

This is a permanent role within our global Risk and Compliance team in Corporate Finance, part of the Finance, Legal, IT and Strategy organisation. The role works at the intersection of Finance, risk, compliance and technology and has regular interaction with senior business and IT stakeholders and external auditors.

What will make you successful

• Minimum six years of relevant experience in risk, compliance, internal controls, external or internal audit, IT audit or Big Four consulting within a complex international organisation

• A relevant university degree in finance, accounting, auditing, information systems, business administration, risk management or a related field; a recognised professional qualification is an advantage

• Strong knowledge of accounting, financial reporting, auditing, fraud risk and internal control principles

• Practical understanding of IT General Controls and their relevance to reliable financial and ESG reporting, including access, change management and IT operations controls

• Experience collaborating with external auditors on audits of financially relevant applications and supporting IT control environments

• Experience with Identity and Access Management, Segregation of Duties and critical access risk; knowledge of SAP GRC Access Control or a comparable access governance solution is an advantage

• Ability to assess technology risks and explain complex IT control matters clearly to Finance, business and senior stakeholders

• Strong analytical, project coordination and stakeholder management skills, with the confidence to challenge constructively and drive sustainable remediation

• Experience with third-party IT assurance, data analytics, continuous monitoring or controls automation is an advantage