Contexte du recrutement et définition de poste

CGG is a fully integrated Geoscience company providing leading geological, geophysical and reservoir capabilities to its broad base of customers. CGG has always been at the forefront of industrial High-Performance Computing (HPC) architectures and technologies.

As seismic processing and imaging is an activity that requires heavy computational capacity and very large data storage to handle huge volumes of data, CGG operates very advanced HPC architecture, from cluster nodes through GPU servers, to optimize price/performance ratio. CGG uses very innovative and cutting-edge cooling technologies including oil immersion to reach a well-recognized level of energy efficiency and reduce its environmental footprint.

CGG is starting to provide Cloud services with a platform-agnostic, open approach for data delivery, storage, software and compute services to support the requirements of our customers and shape the future of the industry.

CGG has selected NIST as its Information Security Framework and is in the process of acquiring SOC-2 type 2 certification for its cloud computing services provided to the industry.

Job Description

This position is responsible for realizing the missions of internal audit of compliance and performance according to the audit program drawn up by the Director of Internal Audit and validated by the Audit and Risk Management Committee. Internal audits are conducted in accordance with the International Practice Framework of the IIA. The Senior Internal Auditor - CISA will manage IT related audits (Cybersecurity, IT General Controls, IT and IS sections of general audits) and participate in other audits (finance related, operational and compliance audits, etc.)

The Senior Internal Auditor - CISA is responsible for:

• Establishing an audit plan for each engagement, taking into account the activity of the operations audited, its specific risks, its resources and the means by which it maintains risks is at an acceptable level;
• Reviewing internal controls for appropriateness of design, effectiveness of implementation and compliance with group policies;
• Identifying, analyzing and assessing the weakness and strengths of the operations audited, including cybersecurity, IT and Business Systems and Solutions operations and associated control environment, in order to contribute to improving their effectiveness;
• Making actionable recommendations that bring value and work out remedial or improvement action plans with auditees;
• Communicating the results of the engagement in an effective and timely report that will inform the decisions of management and other stakeholders;
• Monitoring and controlling implementation of actions plans. Ensure timely completion through proper escalation;
• Accompany the Company’s growth, transformation and digitalization plan;
• Coaching, training and developing junior auditors and interns.

International Business Travel

1 or 2 weeks every two months depending on materiality and distance of the audited entity.  1/3 International audits outside Europe (USA, China, Brazil…), 1/3 audits in Europe (UK, France, Norway…), 1/3 Head Office transverse audits.

Profil recherché

Engineering School or Business school + 3 to 4 years’ experience in an audit services (big 4 ideally) or transaction services company.

Certified Information Systems Auditor (CISA) designation is required or at least CISA exam passed

Autonomy – Judgment / Analytical cleverness

Team player / Emotional intelligence / Communication proficiency

Languages: fluent French and English