Beschreibung
Start: 4.9.2017
Duration: 12 months
Volume: 1 person: 125 days; 2 persons: 200 days
Location: Düsseldorf and remote
Language: English, German desirable
Project Description:
Purpose of the project is to make a platform available where controls and their monitoring can be tracked, monitoring of control effectiveness and reporting on findings.
The client has introduced a governance methodology including an IT internal set of controls.
The key control framework is used across the client's IT applications, contracts, processes and regions.
Actual a SharePoint tool is in use for documentation of key controls and their monitoring.
As basis for documentation of a larger number of controls and their monitoring an off the shelf platform will be evaluated and implemented.
Among possible options are the software solutions of service now or Alfabet from Software AG.
Task Description:
The following main tasks are expected:
- Get to know the current key control monitoring process, pain points, tools
- Get to know relevant stakeholders
- Gather requirements from all stakeholders
- Documentation of requirements
- Creation of a functional design as input for the tool evaluation
- Execution of a proof of concept with pre-selected software products
- Evaluation and creation of a proposal for tool selection
- Implementation and migration of data
- Propose and test the implementation according to the project plan
- Document and describe the new tool in the Henkel templates, with creation of training documentation for all "roles" (PPT, elearning, tool manual)
- Schedule and conduct at least 3 training sessions (2 onsite, 1 video presence) for the tool
Project Description:
Goal of the project is to setup an efficient and effective control set for those application that have a high risk, eg being considered as crown jewels, having sensitive personal data, being exposed to the Internet.
The project defines criteria for selection of high risk applications, create a concept of how to setup controls and how to monitor their effectiveness. It will propose common controls, provide assistance in implementation and enhancement of key controls framework.
Task Description:
The following main tasks are expected:
- Get to know the current key control monitoring process, pain points, tools.
- Get to know relevant stakeholders.
- Definition of criteria for selection of highest risk applications.
- Concept for controls, monitoring and documentation but not on individual application level.
- Support for asset owners on boarding to control monitoring.
- On boarding of applications.
- Document requirements for a control monitoring tool.
- Document and describe process to define, set-up and use a key control framework for the high-risk applications, creation of training documentation for involved "roles" (PPT, E-learning, tool manual).
- Schedule and conduct at least 3 training sessions (eg 2 onsite, 1 video presence) for the application owners.
Michael Bailey International is acting as an Employment Business in relation to this vacancy.