Position Summary
As a member of the professional staff, contributes a high level of specialized knowledge and skill in a discipline (e.g., Accounting, Finance, Human Resources, Information Technology, Operations Planning & Support, Sales & Marketing) area to support department and/or function objectives. Generally, works with considerable independence, developing operating plans and related operational processes for own department in alignment with broader business objectives.
Specific Job Summary
IT Controls Manager role is an IT operational role with accountability for operating maintaining and reporting an internal control self-assessment program for all controls performed by IT teams. Controls cover activities performed by IT that are subject to regular review by internal and external auditors. Controls range from IT General Controls (ITGC), Sarbanes-Oxley (SOX) and Payment Card Industry Data Security Standard (PCI-DSS). This role provides operational support and reviews control evidence provided by other control owners, evidence collection provided back by control performers, and uses judgement if the control was performed per control documentation. This role reports monthly compliance metrics to IT senior leadership on the overall status of controls. They also serve as a single point of contact during internal and external audits to obtain evidence requested by auditors. This role partners with MVW’s Internal Controls and Compliance Team to maintain MVW’s internal controls program.
Expected Contributions
▪ Develops operating plans and workable business processes for own department in alignment with function strategy.
▪ Manages larger business processes and/or projects, setting priorities and measurable objectives, monitoring and reporting on the process, progress, and results.
▪ Responds to, solves, and makes decisions on business requests that have broader department impact and/or moderate risk. Presents alternative solutions to business issues by leveraging the broader organization.
▪ Responsible for own work and contributing to team, department and/or business results. May direct work of non-management staff. Typically influences work of cross-functional or extended teams.
▪ Assists more senior associates in achieving business results by:
− acting in a consultative fashion to implement programs impacting the broader organization.
− assisting in the development and communication of broader organizational goals.
− achieving results against budget within scope of responsibility.
− taking calculated risks to move the department or team forward.
− developing and using systems to organize and keep track of information.
− balancing the interests of own group with the interests of the organization.
− working with others to identify and remove barriers to success.
▪ Readily critiques own behavior to acknowledge mistakes and improve future leadership performance and acts independently to improve and increase skills and knowledge.
▪ Performs other duties as appropriate.
Specific Expected Contributions
▪ Performs oversite of an internal controls self-assessment (CSA) program for IT controls performed within the Enterprise Applications and Enterprise Technology teams
▪ Collaborate with Control Owners to ensure that each control is well documented and being performed.
▪ Lead monthly meetings with IT senior leadership to report on the overall status of controls including any potential changes in IT or areas for improvement
▪ Implement remediation of control deficiencies identified during monthly self-assessments. If issues are identified in a particular month, this role works with Internal Controls and Compliance to implement a solution.
▪ Serve as a single point of contact during internal and external audits to obtain evidence requested by auditors
▪ Collaborates with project teams that involve change to existing applications or systems subject to audit review
▪ Collaborates with projects teams when new applications or systems are onboarded that have controls impact. Assists with identifying impact to current controls.
▪ Onboards new controls to the CSA program as identified during audits, changing governance landscape or new projects
▪ Partners with Internal Controls and Compliance team to align on the control framework and obtain guidance on internal control changes.
Candidate Profile
Successful candidates should possess knowledge and experience and demonstrate strong leadership and relationship skills as follows:
Generally, a professional position requiring significant knowledge and experience in one or more disciplines and/or business operations as well as associate and/or organizational management experience.
College degree and/or relevant experience generally required.
Specific Candidate Profile
• 5+ years of relevant work experience in IT Compliance and Risk or related area • Excellent communication skills (Written, Verbal)
• Experience in IT Audit (SSAE18 – SOC 1/2, SOX, internal controls, internal audit, risk assessments
• Knowledge of ITSM and IT Change Control Processes
• Strong analytical skills with the ability to identify issues and connect the dots across multiple areas
• Strong written and verbal communication skills with the ability to engage and partner confidently with stakeholders across the organization
• Ability to prioritize multiple tasks in a deadline driven, dynamic environment
• Public accounting/consulting firm experience is a plus
Take the first step in charting your own course by joining our Talent Network. It’s the best way to stay informed and receive alerts for exciting jobs that may be perfect for you.
