Key Responsibilities
IT JSOX Execution & Oversight
- Plan, execute, and document ITGC and automated controls testing across APAC, EMEA, Americas, and Global functions.
- Lead IT control walkthroughs with system owners, control owners, and process leads to ensure understanding of control design and operational effectiveness.
- Identify, assess, and communicate control deficiencies, perform root cause analysis, and recommend risk-based remediation actions.
- Track and monitor remediation progress through closure, collaborating with internal stakeholders, external auditors, and co-sourcing partners.
Governance, Risk & Control (GRC) Activities
- Maintain and enhance the GRC platform by updating control frameworks, evidence repositories, testing results, dashboards, and key metrics.
- Ensure accuracy, completeness, and audit readiness of documentation across all in-scope systems and regions.
Stakeholder & Relationship Management
- Build productive relationships with IT Operations, Finance Controllers, Internal Audit, and 2nd Line of Defence teams across markets.
- Provide guidance and training to control owners on JSOX requirements, control execution expectations, and best practices.
- Support the JSOX Manager with reporting to senior stakeholders on programme status, risk areas, and emerging themes.
Continuous Improvement & Value Delivery
- Contribute to ongoing enhancement of JSOX processes, templates, guidance materials, and methodologies.
- Identify opportunities for automation, data analytics, and efficiency improvements using tools such as Tableau, Power BI, AI technologies (e.g., Microsoft Copilot), and Python.
- Help drive maturity in Technology Company-Level Controls (CLCs) and ITGCs, ensuring alignment with global standards.
Collaboration & Additional Responsibilities
- Work closely with global colleagues to ensure consistency in testing, documentation, and remediation approaches.
- Support readiness activities for internal and external audits.
- Assist in regional or global initiatives related to compliance, risk management, and internal controls.
