IT Controls and Audit Manager Job Description: *Based 3 days a week in our Newcastle office Reporting to the Director of IT Governance, this role is responsible for defining, implementing and governing the IT Controls Framework globally. This responsibility includes but is not limited to. - Accountable for defining, implementing and governing the IT controls Framework to ensure that IT controls are effectively managed within IT. - Accountable for developing and implementing an operating model to ensure full compliance with the control framework. - Accountable for Controls Test planning, testing execution, and stakeholder metrics reporting. - Accountable for facilitating and providing effective collaboration between the wider IT teams and our business stakeholders to ensure compliance with our control framework. - Accountable for supporting and enabling IT audit and compliance reviews, ensuring responses are effectively documented and evidenced in a timely manner. - Accountable for ensuring effective remediation plans are in place and tracked to ensure compliance. - Drive excellence in operational delivery in how existing and new applications deliver operational excellence across their controls. - Coaching, mentoring and providing standards to support the wider IT teams in control compliance. Key Responsibilities: - Lead and govern adherence to the control framework and control performance to ensure gaps are effectively reported, remediation plans agreed with stakeholders and operationalised within the agreed timescales. - Ensure there are effective reporting dashboards in place to support control owners. - Manage ongoing compliance and update process documents and control requirements, ensuring new controls are fully documented and compliant with the framework. - Manage and develop Controls Test plans to ensure all controls are effectively tested, reported and remediation plans agreed with stakeholders and operationalised within the agreed timescales. - Maintain and enhance the organisation's internal control framework, ensuring continuous improvement of IT controls and identifying opportunities to streamline and automate controls. - Align with stakeholders on strategic plans to ensure controls are fit for purpose and align to architectural changes in the technology landscape. - Act as a trusted advisor to senior management and business leaders on IT risks and controls. - Develop and deliver training, education and cultural initiatives to embed and operationalise effective control performance. · - Prepare and present regular updates on IT Controls Program to senior leadership and key committees. Ability to summarise and highlight key risks, findings and recommendations. Audits: - Facilitate, support and enabling IT audit and compliance reviews, ensuring responses are effectively documented and evidenced in a timely manner. - Ensure there are effective remediation plans agreed with stakeholders and operationalised within the agreed timescales. - Reduce overall audit efforts by building information depositories and utilising existing control information. Other: - Accountable setting targets, priorities and ways of working for the IT Controls Governance team. - Coaching, mentoring and providing standards to support the IT Controls Governance team and wider IT teams in IT Controls. - Accountable for facilitating and providing effective collaboration between the wider IT teams and our business stakeholders ensuring a seamless end to end experience. Skills, know-how and experience: - Experienced manager who can set strategy, frameworks and drive outcomes in a matrix structure, with a proven ability to manage outputs against set targets. - Proven track record of successful delivery against plans autonomously. - Strong ability to influence stakeholders and manage competing priorities with a hands-on, results-oriented approach. - Excellent written and verbal communication skills, with the ability to communicate complex risk and control details to non-technical stakeholders and senior management. - Strong analytical and problem-solving skills, with the ability to identify risks, propose solutions, and drive continuous improvement. - Demonstrated ability to work collaboratively across teams and with senior leadership. - Skilled at building relationships and influencing others and driving accountability. - Recognised expert in IT Controls - Proven track record in managing audits, understanding detailed technical and translating the details to be able to effectively communicate the details. VC-LINKEDIN Function: IT Country: United Kingdom Office Location: Newcastle Work Place type: Hybrid Advert Working at Sage means you're supporting millions of small and medium sized businesses globally with technology to work faster and smarter. We leverage the future of AI, meaning business owners spend less time doing routine tasks, like entering invoices and generating reports, and more time pursuing their ambitions. Our colleagues are the best of the best. It's why we were awarded 2024 Best Places to Work by Glassdoor. Because to achieve extraordinary outcomes, we need extraordinary teams. This means infusing Sage with people who knock down barriers, continuously innovate, and want to experience their potential. Learn more about working at Sage:sage.com/en-gb/company/careers/working-at-sage/ Watch a video about our culture:youtube.com/watch?v=qIoiCpZH-QE We celebrate individuality and welcome you to join us if you embrace all backgrounds, identities, beliefs, and ways of working. If you need support applying, reach out atcareers@sage.com. Learn more about DEI at Sage:sage.com/en-gb/company/careers/diversity-equity-and-inclusion/ Equal Employment Opportunity (EEO) Sage is committed to Equal Employment Opportunity and providing reasonable accommodations to applicants with physical and/or mental disabilities. In order to provide equal employment and advancement opportunities to all individuals, employment decisions at Sage will be based on merit, qualifications, and abilities. Sage does not discriminate in employment opportunities or practices on the basis of race, color, religion, sex, national origin, age, protected disability, veteran status, sexual orientation, gender identity, genetic information, or any other characteristic protected by applicable law.