> Markdown version of [/jobs/ext/2265853-principal-export-control-and-sanctions-program](https://www.wearedevelopers.com/jobs/ext/2265853-principal-export-control-and-sanctions-program). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Principal, Export Control and Sanctions Program - **Company:** Schneider Electric - **Location:** Barcelona, Spain - **Contract:** Permanent contract - **Skills:** Microsoft Excel, Computer Animation, Data Analysis, Control Objectives for Information and Related Technology (COBIT), Power BI, Data Analytics, SAP GTS - **Published:** August 27, 2026 - **Apply:** https://www.jobleads.com/es/job/ecd0c197655290fcf01969daf09a53b01 ## About the Role * Experience in risk management, internal control, compliance, audit, trade compliance, export control, sanctions, or related governance. * Practical understanding of control design, execution, evidence, testing, remediation, and continuous improvement. * Ability to translate risk, audit, and regulatory requirements into operational actions and clear business messages. * Strong project management, action tracking, analytical, and reporting skills in a matrix organization. * Ability to challenge constructively, influence without authority, and work with senior stakeholders. * High attention to detail, documentation quality, traceability, and audit readiness. Preferred Experience * Experience in export control, sanctions, third-party screening, country risk, or regulatory compliance in a multinational environment. * Experience with Enterprise Risk Management, Internal Control, Internal Audit, or second line of defense frameworks. * Experience designing or testing key controls, including sampling and remediation tracking. * Experience with compliance tools, workflow systems, SAP GTS, ECRP, Power BI, Excel trackers, or similar solutions. ## Description * Risk assessment and risk review: Lead the annual EC&S risk review, maintain the methodology, consolidate risk inputs, prioritize mitigation actions, and ensure risk reporting is clear, documented, and traceable. * Key controls and monitoring: Own the EC&S key controls framework, maintain control objectives and evidence requirements, monitor effectiveness, and identify gaps or recurring weaknesses. * Sampling, evidence and remediation: Design and coordinate sampling plans, define review criteria, collect and challenge evidence, track deviations, and ensure corrective actions have owners, deadlines, and closure evidence. * Risk action plan animation: Maintain the EC&S risk and controls action plan portfolio, follow up with owners, remove blockers, elevate delays, and provide concise leadership updates. * Interfaces with Zones, Functions and risk community: Act as the operational contact point for EC&S risk and controls, support Zones in documenting risks and evidence, and align global expectations with local execution realities. * Reporting, dashboards and data-driven oversight: Maintain KPIs, KRIs, dashboards, and reporting routines; use data to identify trends, prioritize reviews, detect anomalies, and support risk-based decisions. * Continuous improvement and control maturity: Improve the operating model, simplify and standardize ways of working, promote automation, and translate lessons learned into stronger controls and governance. Core Deliverables * Annual EC&S risk assessment and risk review package. * Risk scoring methodology, mitigation criteria, and prioritization view. * Key controls framework, including evidence, monitoring, and effectiveness criteria. * Global sampling plan, sampling results, and remediation follow-up. * Risk and controls action tracker with owners, deadlines, status, blockers, and closure evidence. * Executive dashboard and periodic updates for EC&S leadership, Risk Management, Internal Control, and Internal Audit. * Lessons learned and continuous improvement recommendations. Key Working Relationships * EC&S Program Director: priorities, roadmap, escalation, and leadership reporting. * EC&S Zone Leaders: local risks, control execution, evidence, remediation, and feedback. * Global EC&S Functional Leaders: inputs from policy, process, investigations, classification, screening, M&A/PMI, training, tools, and analytics. * Risk Management, Internal Control, Internal Audit and Compliance: methodology, assurance expectations, findings, action plans, and reporting alignment. * Business and operational teams: practical implementation of controls, remediation, and evidence collection. ## Related Videos - [Replacing Excel with SAP APIs & Python validation](https://www.wearedevelopers.com/videos/1944-replacing-excel-with-sap-apis-python-validation) - [Data Science in Retail](https://www.wearedevelopers.com/videos/586-data-science-in-retail) - [Beyond Dashboards: Fixing Text-to-SQL with Semantic RAG](https://www.wearedevelopers.com/videos/2036-beyond-dashboards-fixing-text-to-sql-with-semantic-rag) - [Blueprints for Success: Steering a Global Data & AI Architecture](https://www.wearedevelopers.com/videos/1577-blueprints-for-success-steering-a-global-data-ai-architecture) - [Data Science on Software Data](https://www.wearedevelopers.com/videos/162-data-science-on-software-data) - [REST, GraphQL, gRPC, and more: A comparison of modern API styles](https://www.wearedevelopers.com/videos/100247-rest-graphql-grpc-and-more-a-comparison-of-modern-api-styles) ## Related Articles - [Best Companies to Work For in Berlin: Top 14 Companies in 2023 ](https://www.wearedevelopers.com/magazine/188-best-companies-to-work-for-in-berlin-top-14-companies-in-2023) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Best Companies to Work For in Germany: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/33-best-companies-to-work-for-in-germany-top-25-companies-in-2023) - [Spanish Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/353-spanish-business-culture-and-etiquette) - [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)