Senior Manager, Global Controls and Assurance

We are UMG, the Universal Music Group. We are the world’s leading music company. In everything we do, we are committed to artistry, innovation and entrepreneurship. We own and operate a broad array of businesses engaged in recorded music, music publishing, merchandising, and audiovisual content in more than 60 countries. We identify and develop recording artists and songwriters, and we produce, distribute and promote the most critically acclaimed and commercially successful music to delight and entertain fans around the world.

Universal Music Group’s Global Controls & Assurance (GCA) Department is a global team of professionals responsible for defining UMG’s ICFR framework, internal control requirements, and related guidance and training. Our team is responsible for:

• Assessing the design and ongoing effectiveness of the company’s internal controls;
• Identifying, evaluating, and supporting the mitigation and remediation of risk;
• Providing consultative support to Operating Companies and management;
• Driving continuous improvement, integration, and transformation initiatives; and
• Developing talent through coaching, collaboration, and knowledge sharing.

Join a dynamic environment where emerging technology, global scale, and an inclusive culture help you achieve your potential while supporting the artists, labels, and businesses shaping the future of music. The team reports to the VP, Global Controls & Assurance.

• Drive and lead the day-to-day execution of Global Controls & Assurance initiatives, including internal audit initiatives, internal controls over financial reporting/SOX compliance, risk assessments, maturity assessments, and related control assurance activities across UMG Operating Companies, Corporate functions, and key business areas.
• Plan initiatives by connecting UMG business priorities, industry developments, process changes, technology dependencies, materiality, and emerging risks to clear objectives, scope, testing strategies, and stakeholder expectations.
• Manage initiatives from planning through completion, including scope, timelines, quality, costs, deliverables, resourcing, status reporting, stakeholder communication, and timely escalation of risks, delays, or obstacles.
• Lead, coach, mentor, and develop team members by setting expectations, reviewing work, providing feedback, supporting individual development plans, and creating opportunities for on-the-job learning and readiness for next-level responsibilities.
• Develop and maintain a positive, productive, collaborative professional relationship with the business and project teams to provide well-coordinated and consistent high-performance results.
• Identify key risks and controls by monitoring changes in company operations, assessing emerging risks, evaluating business process and IT control environments, and translating risks into practical control recommendations.
• Evaluate and enhance controls around business processes and IT environments by developing, optimizing, and executing test plans to evaluate the design and operating effectiveness of entity-level, process, IT general, and application controls.
• Utilize technology, data analytics, and innovative approaches to improve the efficiency, effectiveness, and quality of control assurance activities, reporting, testing, and stakeholder communication.
• Develop, review, and approve audit programs, testing steps, working papers, internal control reports, remediation plans, and related deliverables to confirm alignment with initiative objectives, risk areas, and control requirements.
• Identify and communicate observations, root causes, recommendations, leading practices, and performance improvement opportunities that enhance governance, risk management, control processes, and overall business outcomes.
• Provide objective advice and practical guidance to Operating Companies, Corporate functions, and Business Units to improve control processes, documentation, remediation execution, and readiness for assurance activities.
• Build trusted relationships with senior stakeholders, management, IT, compliance teams, external partners, and initiative teams; communicate risk and control themes…