IT Access & Controls Senior Manager

Job Description:

IT Access & Controls Senior Manager

Location:

100VE/Kingston

Scope:
Global

Work Level: WL2C

Reports to:

Ritu Nibber, Global Risk & Controls Lead

Join a high-performing team, explore Unilever's organisation and strengthen its risk & control environment. The Group Chief Accountant's Department (GCAD) is Unilever's centre of expertise for accounting, reporting and controls. Within GCAD, the Risk & Controls team stewards Unilever's global internal control frameworks and compliance obligations (including SOx), partnering across Business Groups, Operations and Functions to ensure robust, future‑fit controls as the organisation continues its digital transformation.

Unilever's access and IT control landscape is anchored in our Global Access Controls Framework (GACF), IT General Controls (ITGC), Identity & Access Management (IAM) Standard, and the Access Schedule of Authority (SOA) policy, supported by platform‑specific control guides and automation. The IT Access & Controls Senior Manager plays a pivotal role in harmonising these standards globally and embedding "controls by design".

• Own and evolve Unilever's Global Access Controls Framework (GACF) and ITGC control sets, ensuring clear control intent, design standards, evidence expectations and risk‑based scoping for in‑scope systems.
• Translate the IAM Standard and Access SOA policy into actionable, system‑specific requirements (JML lifecycle, SoD, approval authorities, emergency access, logging/monitoring).
• Chair cross‑functional governance forums to align priorities, exceptions and remediation paths.
• Support the IT SOX compliance programme end-to-end: planning, scoping, risk assessment, controls testing, remediation and reporting with the
• Perform annual and ongoing IT risk assessments to identify critical systems impacting financial reporting.
• Ensure change management controls are designed, documented and tested for SOX compliance.
• Embed preventative and detective controls across JML, SoD, periodic reviews, PAM and emergency access.
• Drive automation of SOX controls and evidence collection to improve efficiency and reduce manual effort.
• Provide guidance and training to IT and business stakeholders on SOX requirements and control discipline.
• Build capability across Markets, CSC and Tech teams via communities of practice and benchmarking.
• Define and publish KPIs/KRIs and drive control automation and simplification.

• Experience of managing and driving control optimisation implementation and ideally experience with change management for success operation.
• Thorough understanding of technology and business controls across core processes and systems e.g. Finance and Reporting, Supply Chain, Purchase to Pay, Order to Cash, etc.
• Thorough understanding of IT General Controls, including Information Security, Cybersecurity, programme Change, Data Risk and Change Management for IT.
• Thorough understanding of SAP including good practice SAP Role Concept and Segregation of Duties design, IT General Controls, Report Testing, Interfaces, and Automated Business Controls. SAP S/4 HANA knowledge will be an advantage.
• Thorough understanding of GRC tools (SAP Access Controls/Process Controls, Service Now, etc.) for monitoring of Process and Access Controls and an understanding of the risk management module.
• Experience delivering IT audits an advantage.
• CISA (Certified Information Systems Auditor) and CISM (Certified Information Security Manager) certifications preferred.
• Experience working in a high performing team, leading projects and working with senior stakeholders.
• Strong communication and influencing skills, bringing the ability to explain technical concepts to a wider business audience.
• Experience and awareness of working in multicultural and multilocation teams, ability to manage offshore teams for design and operation of controls.
• Experience of project management, particularly for complex, multi‑stakeholder change programmes.

• GCAD (Risk & Controls, Reporting) and Control Service Centre (CSC)
• Technology Platforms & Product Owners;
  Cyber Security (ISOC)
• Process Excellence & Capabilities (PEC);
  Data…