We are Hiring: IT SOx & Control Assurance Lead Location: Remote Hours: Monday to Friday 09 00 to 17 30
About the Role
We are seeking an experienced IT SOx & Control Assurance Lead to take ownership of the enterprise IT controls framework within a regulated financial services environment. This is a senior, high-impact role responsible for setting the strategic direction for General Computer Controls (GCCs) and strengthening the wider IT control environment. You will partner closely with Technology, Risk, Compliance, and Finance stakeholders to ensure a robust, sustainable, and audit-ready control framework. You will play a key role in driving accountability, influencing remediation priorities, and continuously improving control maturity across the organisation.
Key Responsibilities
SOx Controls and Governance
1. Lead the IT SOx controls framework, with ownership of GCCs and oversight of technology control environments
2. Define and maintain the Risk and Control Matrix (RACM), ensuring alignment to systems, processes, and regulatory requirements
3. Continuously enhance the IT control framework to support sustainable SOx compliance
Stakeholder Management
4. Drive senior engagement and accountability across technology teams
5. Partner with Technology, Risk, Compliance, and business stakeholders to strengthen control effectiveness
6. Promote awareness and understanding of SOx controls and responsibilities across the organisation
Audit and Assurance
7. Act as the primary lead for internal and external audit engagement on IT SOx matters
8. Ensure audit readiness, including documentation, walkthroughs, and evidence management
9. Manage audit responses and ensure timely resolution of findings
Issue Management and Remediation
10. Oversee governance and resolution of IT SOx control findings
11. Develop and drive pragmatic and sustainable remediation plans
12. Ensure issues are resolved with appropriate evidence and audit validation
Segregation of Duties (SoD)
13. Provide oversight of SoD controls across systems and applications
14. Ensure effective governance of access, roles, and conflict management
15. Drive timely resolution of access-related risks and control gaps
Skills and Experience
Essential
16. Strong experience in SOx compliance, with a focus on General Computer Controls (GCCs)
17. Broad technical understanding of IT environments, including identity and access management, change management, cloud platforms, and infrastructure
18. Proven experience designing, implementing, and improving IT control frameworks
19. Ability to influence and challenge senior stakeholders to drive control improvements
20. Strong communication skills, with the ability to translate complex technical risks into clear business outcomes
Desirable
21. Background in IT audit (internal or external)
22. Professional certifications such as CISA (preferred), or CISM, CRISC, CISSP
23. Knowledge of control frameworks such as COBIT, ISO 27001, and NIST
24. Experience with GRC tools and evidence management platforms
Why Join Us At Kensington Mortgages, we believe our people are at the heart of our success. We are committed to creating a supportive, flexible and inclusive environment that enables both personal and professional growth. We actively promote wellbeing, development and work life balance, and value diversity of thought, background and experience across our teams. 03-Jul-2026 Home