Senior Manager - Group IT Controls

The Group IT Controls Sr. Manager will be responsible for developing, implementing, and monitoring IT general controls (ITGCs) and application controls across the holding company and its six operating companies (Opcos). This role will ensure that IT systems and data are secure, compliant, and effectively support internal control and risk management frameworks.

Responsibilities

• Ensure design and maintenance of a robust IT control framework, covering ITGCs, application controls, and change management processes across all group entities.
• Identify and review IT-related risks and control gaps in systems, networks, infrastructure, and applications. Recommend and implement appropriate mitigating controls.
• Support internal and external audits by coordinating IT control testing and documentation. Ensure timely resolution of IT audit findings and compliance with regulatory and industry requirements (e.g., SOX, GDPR, local data laws).
• Work closely with Group IT and business stakeholders to integrate IT controls into key systems, including ERP, financial applications, and operational technology.
• Oversee controls around user access, segregation of duties (SoD), and system changes to protect data integrity and system availability.
• Support the implementation and monitoring of GRC tools or automation solutions to enhance visibility and tracking of IT controls.
• Track and report on control performance, highlighting key risks, issues, and deviations.

Requirements

• Bachelor's degree in Information Systems, Computer Science, Accounting Information Systems, or related field.
• Minimum 8 years of experience in IT audit, IT risk management, or IT controls, with at least 3-4 years in a lead or management role.
• Strong understanding of ITGCs, application controls, and frameworks.
• Familiarity with ERP systems (e.g., SAP, Oracle Fusion, Microsoft Dynamics) and cloud-based platforms.
• Demonstrated ability to lead cross-functional teams, manage complex projects, and drive organizational change.
• Professional certifications preferred: CISA, CISM, CISSP, or equivalent.