Senior Principal, Digital Governance

About The Role

Schneider Electric is seeking a senior-level Enterprise IT General Controls (ITGC) professional to help strengthen and mature our global IT controls and risk management program. In this highly visible individual contributor role, you will serve as a subject matter expert and trusted advisor, partnering across Digital, Finance, Internal Control, Audit, Cybersecurity, and Enterprise Architecture teams to ensure effective IT controls, audit readiness, and regulatory compliance.

You will play a key role in supporting the design, execution, monitoring, and continuous improvement of IT General Controls across enterprise applications, infrastructure, cloud platforms, and third-party services that support business operations and financial reporting. This position offers the opportunity to influence a global control environment, drive meaningful improvements, and help shape a growing governance program within Schneider Electric.

The Enterprise IT General Controls Specialist is responsible for supporting the design, operation, monitoring, and continuous improvement of the Enterprise IT General Controls (ITGC) framework. This role helps ensure IT controls are appropriately defined, implemented, documented, monitored, and evidenced across in-scope applications, infrastructure, cloud services, third-party services, and digital platforms that support business operations, financial reporting, and regulatory compliance objectives. The specialist will help align ITGC, Internal Control over Financial Reporting (ICoFR), cybersecurity, resilience, audit, and risk management activities.

Working closely with control owners, IT leaders, Internal Control, Internal Audit, external auditors, Cybersecurity, Enterprise Architecture, and operational teams, this position helps improve control execution, evidence quality, remediation management, and overall audit readiness.

• Apply the Enterprise ITGC policy and control catalog across assigned systems, platforms, and control domains.
• Support control design and operating effectiveness activities for:
  • User access management
  • Privileged access management
  • Joiner-Mover-Leaver (JML) processes
  • Change management
  • Software Development Lifecycle (SDLC)
  • IT operations
  • Backup and recovery
  • Segregation of duties
  • Data management
  • Cloud controls
  • Third-party controls
• Maintain practical control guidance, evidence expectations, and execution routines for control owners and IT stakeholders.
• Identify control gaps, recurring exceptions, ownership issues, and areas where policy requirements have not been implemented as intended.

• Support the mapping of ITGCs to ICoFR risks and financial reporting dependencies, including applications, reports, interfaces, access rights, automated controls, and key technology dependencies.
• Collaborate with Internal Control and Finance stakeholders to confirm in-scope systems and control expectations for financial reporting and Corporate Sustainability Reporting Directive (CSRD)-related processes.
• Support the annual refresh of ITGC and ICoFR risk mappings, including control ownership, monitoring routines, and evidence requirements.
• Help translate technical control requirements into clear business impacts, financial reporting relevance, and audit-ready control descriptions.

• Assist with the coordination of internal and external audits related to ITGC, ICoFR, cybersecurity, resilience, and digital governance.
• Prepare audit requests, walkthrough materials, control narratives, evidence packages, and responses in partnership with control owners and technology teams.
• Track findings, management action plans, due dates, remediation progress, ownership, and evidence of closure.
• Escalate issues when evidence is missing, action plans are unclear, deadlines are at risk, or additional leadership alignment is required.

• Promote consistent, timely, and complete evidence submission for audit and control testing activities.
• Validate that remediation activities include clear ownership, target completion dates, supporting evidence, and sustainable preventive measures.
• Prepare concise status reports, dashboards, and executive-level summaries.
• Leverage available tools and structured repositories to improve visibility, traceability, evidence retrieval, and follow-up effectiveness.

• Partner with IT leaders, process owners, Cybersecurity, Enterprise Architecture, Data teams, Internal Control, and Audit teams to improve control maturity.
• Provide practical guidance to stakeholders on control expectations, audit preparation, and remediation standards.
• Identify opportunities to simplify control execution, reduce manual effort, improve data quality, and increase automation where appropriate.
• Support awareness, training, and communication activities that strengthen accountability, ownership, and…