Group Internal Controls - IT Manager Location: Cheltenham, Gloucestershire (hybrid working) The role: The Group Internal Controls - IT Manager will play a key role in expanding the second line assurance function into IT assurance, supporting the ongoing development of the Group’s controls framework. This is a global role, providing oversight of IT controls across Group IT infrastructure, Group and Business Unit–owned applications, and IT governance. As a newly created position, the role offers the opportunity to shape and define the IT assurance approach while working as part of an international team of assurance professionals within a complex FTSE100 organisation. Key responsibilities: · Plan and deliver the annual programme of general IT controls testing across a global organisation · Work closely with Group IT and Business Unit IS teams to communicate control findings, agree remediation plans and track progress · Maintain and enhance the Group’s IT risk and controls matrix and general IT controls testing methodology · Partner with the Internal Controls Lead to develop IT assurance ways of working and expand the second line assurance function into IT · Conduct IT controls testing across infrastructure, applications and governance, ensuring alignment with internal policies and control expectations · Clearly articulate control weaknesses and remediation actions to senior management · Support Group IT in embedding effective tracking and reporting of control actions to drive accountability · Contribute to the development and delivery of IT controls training for control owners, operators and the second line team · Monitor emerging IT risks and industry best practices to continuously evolve the IT internal controls methodology · Act as an advocate for the Group’s controls agenda, building strong relationships across the IT community Your experience: · Professional certification such as CISA (Certified Information Systems Auditor) or equivalent · Accounting qualification desirable but not essential · Proven experience in IT auditing or IT controls testing, gained within practice or a large multinational organisation · Strong understanding of IT governance, risk management and compliance · Working knowledge of information security frameworks such as ISO 27001, NIST CSF, CIS 18 Controls, COBIT, SOX and ITIL Your skills: · Strong written and verbal communication skills, with the ability to engage senior stakeholders · Demonstrate high standards of integrity and professionalism · Excellent collaboration and interpersonal skills, able to build effective global relationships · Comfortable working independently and proactively in a developing role · Commercially minded, able to provide pragmatic and proportionate risk solutions · Passionate about IT risk and controls, with a commitment to staying current with industry developments Spirax Group is a FTSE100 and FTSE4Good multi-national industrial engineering Group with expertise in the control and management of steam, electric thermal solutions, peristaltic pumping and associated fluid technologies. Our Purpose is to create sustainable value for all our stakeholders as we engineer a more efficient, safer and sustainable world. Our technologies play an essential role in critical industrial processes and industrial equipment across industries as diverse as Food & Beverage, Pharmaceutical & Biotechnology, Power Generation, Semiconductors and Healthcare. With customers in 165 countries, we provide the solutions that sit behind the production of many items used in daily life, from baked beans to mobile phones! Our Purpose, supported by our inclusive culture and Values, unites us, guides our decisions and inspires us everywhere that we operate. We support our colleagues to make their difference for each other as well as customers, communities, suppliers, our planet and shareholders by creating a truly equitable working environment where everyone feels included. Everyone is Included at Spirax Group We are passionate about creating inclusive and equitable working cultures where everyone can be themselves and achieve their full potential. For us, that means supportive teams and strong relationships where everyone’s contribution is valued - across social and cultural backgrounds, ethnicities, ages, genders, gender identities, abilities, neurodiversity, sexual orientation, religious beliefs, and everything else that makes us human and unique.