IT Controls Manager

Job Duties and Qualifications

Job Summary:
We are seeking an experienced IT Controls Manager in our Internal Assurance Services department to also serve as a member of our S4 implementation team. The ideal candidate will be responsible for designing and monitoring IT General Controls, ensuring compliance, and participating as an integral member of the S4 implementation team related to Security/GRC. This role requires a strategic thinker with a strong background in IT Controls, SAP security and GRC processes and GRC frameworks.
 

Key Responsibilities:
•    IT Controls: Manage the design of IT General Controls and testing and monitor remediation of IT control deficiencies.  Quarterly reporting on results of IT Control testing.
•    Segregation of Duties: Manage the segregation of duties process including identification, elimination/mitigation of conflicts and monitoring of mitigation controls for accepted segregation of duties.
•    S4 Implementation Team Member
             *Role Management: Assist business process teams in role design for S4 and other applications as well as user role mappings, ensuring adherence to role design strategy.  Handle exceptions for sensitive role assignments and provisioning during go-lives.
             *Segregation of Duties: Assist business process teams in defining segregation of duties rules to be monitored for S4 and resolving any violations or defining mitigation controls.
             *User Support: Assist users with SOD violations, role issues, and GRC provisioning.
             *GRC Customization: Work with the GRC team on necessary system customizations.
             *User Access Review: Coordinate review of access for users.  Additionally, assist in the implementation of a new User Access Review application.
 

Qualifications:
•    Bachelor’s degree in information technology, Computer Science, Business Administration or a related field.
•    Proven experience in IT Controls, GRC, and SAP S4 role design processes.
•    Experience with IT SOX controls a strong plus.
•    Strong analytical and problem-solving skills.
•    Excellent communication and interpersonal skills to collaborate among different teams and stakeholders.
•    Familiarity with SAP S/4, GRC, Azure DevOps, AuditBoard (SOXHub) and role management processes.
•    Relevant certifications (e.g., CISA) are a plus.