Senior Manager, IT Risk and Controls

Hybrid, Downtown Chicago, IL or New York, NY

As Senior Manager, IT Risk and Controls, you’ll sit at the intersection of technology, finance, and compliance, helping shape how we manage IT control risks across a global enterprise. You’ll serve as a trusted advisor to senior IT stakeholders, proactively identifying risk, influencing control priorities, and leading practical improvements that strengthen our global control environment. This is a high-visibility role helping drive how we design, govern, and continuously improve controls as Amer Sports continues to scale and modernize its systems.

• Independently lead SOX compliance and internal control initiatives across the ITGC landscape (access management, change management, and system operations) ensuring controls are designed effectively, documented properly, and executed in alignment with internal policies, regulatory expectations, and the COSO framework.
• Plan key milestones and monitor execution of SOX and internal controls across the IT Organization (including Group level controls and Brand specific controls).
• Provide tactical hands‑on support to IT control owners on deficiency root cause analysis, remediation planning and status tracking.
• Partner closely with the IT Organization across Group and Brands and serve as a primary point of contact to ensure alignment on SOX and IT controls scope, design, and execution.
• Facilitate audit readiness activities for IT process and control owners, providing real‑time assessment and feedback on the state of the controls and serving as a subject matter expert on SOX compliance methodology and objectives.
• Act as a trusted advisor and primary liaison among the IT Organization and internal and external auditors, building trust and maintaining credibility while driving timely alignment across a matrixed environment.
• Guide internal and external audits on changes to the IT control environments, including new system implementations and/or process changes, with upstream and downstream control impact.

• Lead governance of system‑based controls and reconciliation processes across ERP platforms, including SAP ECC and S4/HANA, and financial tools such as SAP GRC, One Stream, Workday, and Black Line.
• Partner with system owners and IT process leaders to address configuration, segregation of duties, data integrity, and compliance requirements.
• Influence and support technology and process stakeholders to embed control considerations into system enhancements, process changes, and data governance decisions before risks become audit findings.

• Lead ongoing IT risk and control assessments identifying gaps across systems, interfaces, data flows, cloud infrastructure (AWS/Azure), and emerging risks from AI‑enabled tools and automated processes, and own mitigation plans through to resolution.
• Own ongoing assessments of IT control performance, performing Quality Assurance (QA) testing on key controls, identifying control gaps, deficiencies, and areas of risk exposure, and developing actionable mitigation plans.
• Actively monitor management’s control certification process to ensure timely completion.

• Lead IT controls work through cross‑functional influence, coordinating co‑sourced Internal Audit resources, external audit engagement teams, GBS Risk & Controls colleagues, IT leaders, Finance partners, and regional stakeholders without relying on direct reporting lines.
• Act as a senior advisor and thought partner to stakeholders by translating complex technology and control risks into clear business implications, practical recommendations, and action plans.
• Embed controls by design into ERP implementations, system upgrades, process redesigns, and digital transformation initiatives.
• Promote the transition from manual, detective controls to preventive and automated controls where feasible.

• 7+ years in IT risk, IT audit, SOX IT controls, technology risk management, or a related controls role, ideally in a public company that is…