ICT GOVERNANCE
Pubblicato il 15-10-2026 - Ariston Holding in Mantova
Select how often (in days) to receive an alert: Ariston Group is a global leader in sustainable climate and water comfort, listed on Euronext Milan. In 2025 the group reported 2.7 billion-euro revenues, with almost 11,000 employees, direct presence in 41 countries in 5 continents, 32 production sites and 31 research and development centers. The group demonstrates its commitment to sustainability through renewable and high-efficiency solutions, including heating heat pumps, water heating heat pumps, hybrids, domestic ventilation, air handling, electric components, and solar thermal systems, while continuously investing in technological innovation, digitalization, and advanced connectivity solutions. The group operates under global strategic brands Ariston, Wolf and Elco, and brands such as Calorex, NTI, Atag, Domotec, Brink, Chromagen, Racold, as well as Thermowatt and Ecoflam in the components and combustion technologies business. ICT Governance & Risk Department: ICT Security Reports to:
Governance Risk and Compliance About the Role We are looking for a a professional to support Group-level ICT Security governance, ITGC compliance, IT risk management and SAP/ERP access governance. The role focuses on ensuring effective control execution, supporting audit activities, coordinating evidence collection and monitoring remediation plans with relevant control owners. It also includes the management of Identity Access Management processes for SAP and ERP environments, with a focus on authorization procedures, Segregation of Duties, periodic access reviews, ticket management and escalation of access-related risks. Key Responsibilities * Support IT General Control compliance & IT Controls according to best practice by verifying control implementation and effectiveness across relevant ICT processes and systems. * Support external and internal audit activities by coordinating evidence, control owners, findings and remediation actions. * Conduct an initial comprehensive IT risk