Sr. Manager - IT Internal Controls

Job Purpose

The Senior Manager - IT Controls and SOX Compliance will report to the Senior Director - Corporate Accounting and will lead the Company’s IT controls program supporting internal control over financial reporting. This role is responsible for the strategy, execution, documentation, and continuous improvement of IT general controls, IT application controls, IT-dependent business controls, and related SOX compliance activities across the Company’s global systems environment.

The Senior Manager will partner closely with finance, information technology, internal audit, external auditors, business process owners, and global control owners to assess risk, evaluate control design and operating effectiveness, coordinate testing, monitor remediation, and support timely completion of management and external audit requirements. This role will also provide leadership over co-source providers and global stakeholders, promote consistent testing and documentation standards, and identify opportunities to improve the efficiency, quality, and sustainability of the IT controls program.

• Lead the Company's IT controls program supporting internal control over financial reporting, including IT general controls, IT application controls, IT-dependent business controls, key reports, interfaces, and financially relevant systems.
• Develop and execute a risk-based annual IT SOX plan, including scoping, risk assessment, control design evaluation, management testing, and documentation requirements.
• Maintain and enhance IT control documentation, including risk and control matrices, process narratives, walkthrough materials, testing procedures, and evidence standards.
• Partner with finance, IT, internal audit, business process owners, and control owners to evaluate the impact of new systems, system upgrades, process changes, and control changes on the SOX program.

• Oversee the execution of IT control testing, including walkthroughs, design effectiveness assessments, operating effectiveness testing, and review of supporting evidence.
• Manage co-source providers and global testing resources, including budget planning, resource coordination, workpaper review, and evaluation of testing conclusions.
• Ensure control testing is completed timely, consistently, and in accordance with Company methodology, professional standards, and external audit expectations.
• Use data analytics, automated audit tools, GRC platforms, and continuous controls monitoring techniques to improve testing efficiency, evidence quality, and control coverage.
• Coordinate with external auditors on procedures performed to increase efficiency between management testing and external audit testing.

• Evaluate IT control deficiencies, including root cause analysis, severity assessment, remediation planning, and impact on internal control over financial reporting.
• Track remediation activities and provide timely status updates to finance leadership, IT leadership, internal audit, and external auditors.
• Support the design and implementation of sustainable remediation plans that address control gaps and strengthen the overall control environment.

• Serve as the primary liaison with the external audit IT team, coordinating requests, evidence submissions, walkthroughs, testing status, findings, and supplementary procedures.
• Coordinate with external auditors to increase reliance on management testing, reduce duplication, and improve audit efficiency.
• Partner with local external audit firms and global management teams to support statutory audit and financial reporting requirements where IT controls or system evidence are relevant.
• Prepare clear and concise status reports, issue summaries, and control-related communications for senior management and other stakeholders.

• Monitor emerging IT risks, system changes, technology initiatives, cybersecurity considerations, and regulatory expectations that may affect financial reporting controls.
• Participate as a stakeholder in key IT initiatives to ensure that financial controls are considered during system design, implementation, and change management.
• Promote consistent IT control practices across global locations and support continuous improvement of the Company's governance, risk management, and control processes.
• Provide training, coaching, and guidance to IT and business control owners to strengthen control awareness and accountability.

• Lead, mentor, and develop IT controls team members and co-source resources.
• Build strong cross-functional relationships with finance, IT, internal audit, external auditors, and business leadership.
• Foster a culture of accountability, collaboration, continuous improvement, and high-quality execution.