About this role
Role Overview
We are looking for an experienced Manager, IT Controls Assurance (COE India) to lead our IT SOX, ITGC and technology controls agenda within a Global Capability Centre (GCC) environment. The role requires a strong blend of technical expertise, risk and controls knowledge, audit experience and people leadership .
The ideal candidate will be someone who can operate comfortably between technology teams, internal/external audit, Finance, Risk & Controls and senior leadership , while building and leading a high-performing controls team.
What You'll Do
- The role leads IT assurance program delivery and review including risk assessment
- Provide leadership and oversight across IT General Controls, application controls and technology risk & compliance .
- Review of testing documentation, assurance scope beyond SOx, Testing automation and efficiency, and annual capacity estimation.
- Partner closely with Internal Audit, External Audit, Finance, Risk & Controls and Technology leadership to ensure effective control environments.
- Identify control gaps, drive remediation and ensure timely closure of audit findings.
- Provide technical guidance on ERP and enterprise technology environments , with strong understanding of platforms such as SAP and other large-scale business applications.
- Assess risks across areas such as access management, change management, IT operations, segregation of duties, system implementations and application controls .
- Lead and manage a team of controls/audit professionals, including coaching, capability building, performance management and succession planning .
- Build strong relationships with senior stakeholders and influence technology teams to embed controls into their day-to-day operations.
- Drive continuous improvement and automation of the SOX/control testing process.
- Support transformation initiatives, system implementations and changes in the technology landscape from a controls and compliance perspective .
- Provide clear, executive-level reporting on control health, key risks, audit observations and remediation progress.
What We're Looking For
- 12+ years of overall experience in IT SOX, ITGC, Technology Risk, IT Audit, Controls or related areas with minimum 3 years of experience in people managment
- Strong hands-on expertise in ITGC, SOX compliance, IT audit and risk & controls .
- Experience managing SOX programs in a complex, global organization or GCC environment .
- Strong understanding of ERP environments , preferably SAP , and their associated IT/application controls.
- Experience with Cloud platforms, SaaS applications, and emerging technologies (AI/ML, RPA) is a plus
- Experience with in-house built software is a plus
- Experience working with Internal Audit, External Audit and senior business/technology stakeholders .
- Proven people management experience , with the ability to lead, develop and motivate a team.
- Strong understanding of IT processes including access controls, change management, IT operations, SDLC, cybersecurity controls and segregation of duties .
- Experience managing remediation of control deficiencies and audit findings.
- Strong analytical, problem-solving and stakeholder management skills.
- Ability to translate complex technology/control risks into clear business implications for senior leadership .
Education & Preferred Background
- Bachelor's degree in Engineering, Information Technology, Computer Science, Finance, Accounting or related discipline .
- CA / CPA / CISA / CRISC or other relevant professional qualification would be an advantage.
- Candidates with an Engineering or CA background would be preferred, particularly where combined with strong technology controls experience.
- Prior experience in a GCC / Global Shared Services / multinational environment is strongly preferred.
The Ideal Candidate
We're looking for a leader who is technically strong enough to challenge and guide Technology teams, controls-focused enough to stand up to Audit, and people-oriented enough to build and lead a strong team.
Someone who can move beyond “testing controls” to actually influencing how technology risk and controls are managed across the organization.
Pre-Employment Screening
If your application is successful, your personal data may be used for a pre-employment screening check by a third party as permitted by applicable law. Depending on the vacancy and applicable law, a pre-employment screening may include employment history, education and other information (such as media information) that may be necessary for determining your qualifications and suitability for the position.