> Markdown version of [/jobs/ext/1931312-senior-consultant-iga-sap-grc-sod-100-en-remoto](https://www.wearedevelopers.com/jobs/ext/1931312-senior-consultant-iga-sap-grc-sod-100-en-remoto). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Consultant Iga Sap Grc & Sod, 100% En Remoto - **Company:** Ust - **Location:** Madrid, Spain (Remote available) - **Contract:** Permanent contract - **Skills:** Control Objectives for Information and Related Technology (COBIT), Cyber Security, Digital Technology, Identity and Access Management, SAP GRC, SailPoint - **Published:** August 5, 2026 - **Apply:** https://www.buscojobs.com.es/senior-consultant-iga-sap-grc-sod-100-en-remoto-en-madrid-ID-365614900 ## About the Role Mandatory Skills - Minimum 8 years of experience in SoD controls auditing and COSO framework compliance within regulated financial institutions. - Strong hands-on experience with: - SAP GRC - SailPoint IdentityIQ and/or IdentityNow - Identity Governance Administration (IGA) - Segregation of Duties (SoD) - COSO Internal Control Framework - Proven experience managing large-scale access certification and recertification campaigns. - Deep understanding of technology risk management and access controls. - Experience defining SoD matrices and managing access conflict remediation. - English level B2 or higher. Nice to Have - Knowledge of COBIT. - ITIL v4 Foundation certification. - ISO ***** Lead Auditor certification. - Experience supporting external audits conducted by Big Four firms. Key Skills SoD COSO SAP GRC SailPoint Identity Governance IGA IdentityIQ IdentityNow Access Certification Technology Risk Management What do we offer? ## Description Senior Consultant IGA SAP GRC & SoDWe re looking for top talent and we d love for you to join our team!UST is a North America-based multinational company, certified as a Top Employer, with more than 35,000 employees worldwide and operations in over 30 countries.We are leaders in digital technology services, delivering large-scale technology solutions for global organizations.What are we looking for?We are seeking a Senior Identity Governance Segregation of Duties (SoD) Consultant to join an international project within a highly regulated financial institution, supporting strategic initiatives related to Identity Governance Administration (IGA), access management, and regulatory compliance.The selected professional will lead SoD risk assessments, access certification and recertification campaigns, internal controls governance, and Identity Governance initiatives leveraging SAP GRC and SailPoint platforms.Location: 100 Remote (Spain-based candidates only) Language: English B2 minimum Schedule: 3:00 PM 11:00 PM (summer) / 2:00 PM 10:00 PM (winter), aligned with Venezuela business hours (9:00 AM 5:00 PM) Expected Start Date: From October 1st Key Responsibilities - Perform analysis and management of Segregation of Duties (SoD) risks across complex enterprise environments.- Design, maintain, and enhance SoD matrices and conflict-detection rules.- Administer and evolve Identity Governance solutions based on SAP GRC and SailPoint (IdentityIQ / IdentityNow).- Lead access certification and recertification campaigns covering more than 10,000 identities.- Define and monitor internal controls aligned with the COSO framework.- Collaborate with audit, cybersecurity, risk, and compliance teams.- Support technology risk management initiatives and continuous improvement of IGA processes.- Participate in internal and external audit activities, ensuring regulatory and compliance requirements are met.Mandatory Skills - Minimum 8 years of experience in SoD controls auditing and COSO framework compliance within regulated financial institutions.- Strong hands-on experience with: - SAP GRC - SailPoint IdentityIQ and/or IdentityNow - Identity Governance Administration (IGA) - Segregation of Duties (SoD) - COSO Internal Control Framework - Proven experience managing large-scale access certification and recertification campaigns.- Deep understanding of technology risk management and access controls.- Experience defining SoD matrices and managing access conflict remediation.- English level B2 or higher.Nice to Have - Knowledge of COBIT.- ITIL v4 Foundation certification.- ISO ***** Lead Auditor certification.- Experience supporting external audits conducted by Big Four firms.Key Skills SoD COSO SAP GRC SailPoint Identity Governance IGA IdentityIQ IdentityNow Access Certification Technology Risk Management What do we offer?- 23 vacation days plus December 24th and 31st.- Benefits package including private health insurance, life insurance, accident insurance, and remote work support.- Flexible compensation program (meal vouchers, childcare, transportation, online English lessons, and more).- Free access to learning and training platforms.- Long-term career opportunities and professional growth plans.- Employee referral program with incentives.- Choice between 12 or 14 annual salary payments.- Work-life balance initiatives, including flexibility and summer intensive schedule.- Discounts through UST Club and partner gyms.Interested in learning more?Apply now and we ll be in touch!Commitment to Diversity: At UST, we promote equal opportunities and do not discriminate based on race, gender, disability, age, religion, sexual orientation, or nationality.We are committed to fostering an inclusive workplace and actively encourage applications from people with disabilities.SAP GRC, SailPoint IdentityIQ, SailPoint IdentityNow, COBIT, ITIL, ISO ***** ## Related Videos - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Great DevEx and Regulatory Compliance - Possible?](https://www.wearedevelopers.com/videos/1426-great-devex-and-regulatory-compliance-possible) - [Why Your Next Best Talent Might Not Be in Your Neighborhood](https://www.wearedevelopers.com/videos/1861-why-your-next-best-talent-might-not-be-in-your-neighborhood) - [Less Is More: How Lagom and Agile Can Create Harmonious Workflows](https://www.wearedevelopers.com/videos/1993-less-is-more-how-lagom-and-agile-can-create-harmonious-workflows) ## Related Articles - [Spanish Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/353-spanish-business-culture-and-etiquette) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Mastering Remote Work: Tips for Developers](https://www.wearedevelopers.com/magazine/558-mastering-remote-work-tips-for-developers) - [Best Job Boards for Remote Work for Developers](https://www.wearedevelopers.com/magazine/290-best-job-boards-for-remote-work-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)