Director - Information Services, Compliance

Description

Albany International is seeking a Director, Information Systems Compliance, to lead Albany’s IT/IS compliance program with an emphasis on SAP risk and controls and SOX compliance. The role partners closely with SAP Security, SAP Basis, Enterprise Data Services, SAP Functional/Technical teams, and business stakeholders to design controls, manage testing, and maintain audit readiness across Albany’s global environment.

 

About Albany International

Albany International is a global advanced textiles and materials processing company with two core businesses: Albany Machine Clothing (custom-designed fabrics and belts for process industries) and Albany Engineered Composites (highly engineered composite parts for aerospace applications).

About Global Information Services (GIS)

Global Information Services (GIS) delivers the enterprise systems, infrastructure, and technology services that support Albany’s internal users and customers, with a strong focus on service and reliability.

 

Responsibilities

• Lead the IT/IS compliance program, including governance, control design, metrics, reporting.
• Primary IT compliance interface with external audit technical partner and staff.
• Assess SAP and IT risks in a hands-on leadership role with direct accountability for the appropriate design of key controls (including SOX-relevant ITGC/application controls).
• Actively engage in control design, testing strategy, evidence review, and manage ongoing control performance and testing.
• Serve as a key partner to SAP Security to ensure effective access controls, including user/role design and analysis (authorization objects), sensitive access, segregation of duties, and Fiori access considerations.
• Own SAP Governance, Risk, and Compliance (GRC) processes for Access Risk Analysis and Emergency Access Management, including evidence standards and control testing support.
• Coordinate internal and external audits (including SOX) and manage walkthroughs, evidence collection, remediation plans, and closure validation.
• Partner with SAP Basis and SAP Development on change governance (transports, configurations, break-fix) to ensure controls are built into delivery and operations.
• Partner with SAP Functional/Technical and business teams to understand end-to-end processes and integration points (including FI) and their impact on financial reporting controls.
• Maintain SAP compliance documentation (policies, procedures, narratives, flow/architecture documentation as needed) and a controls inventory/testing calendar.
• Support SAP Global Trade Compliance (GTC) and related compliance reporting processes; ensure control objectives are understood and testable.
• Drive readiness and control design for SAP implementations and major releases.
• Coordinate FI reporting system controls and integrations (MS BI a plus), and support SAP licensing and audit activities.

Qualifications

 

Formal Education & Certification

• Bachelor’s degree in information systems, Computer Science, Accounting, or a related field, or equivalent experience.
• 8+ years of progressive experience in IT risk, IT audit, cybersecurity compliance, or technology controls.
• One or more relevant certifications preferred (e.g., CISA, CISSP, CISM, CRISC, CPA).

Knowledge & Experience

• Demonstrated experience leading SAP IT/IS SOX compliance in a US public company (risk assessments, control design, control performance, testing, and audit management) with strong understanding of GRC concepts.
• A strong mix of the following skills within the SAP S/4 HANA platform:

• SAP Security (Expert): user/role analysis (authorization objects), sensitive access, segregation of duties, and Fiori access considerations.
• SAP GRC (Expert): Access Risk Analysis and Emergency Access Management.
• SAP GTC (Good understanding): Compliance module concepts and control expectations.
• SAP Basis / Development (Good understanding): platform operations and change delivery processes.
• SAP Functional Modules (Good understanding): SAP business processes; configuration experience in at least one key module; integration with FI and impact on financial reporting.
• FI reporting systems (Good understanding): architect