Division Manager - Compliance and IT Governance

<p class="MsoTitle" style="margin-bottom:0in;"><span style="font-size:20pt;">Compliance and IT Governance Manager</span></p><p class="MsoNormal" style="margin-bottom:0in;line-height:normal;"><span style="font-size:11pt;">Level 6 | Finance – Financial Information Systems | Reports to Vice President Finance</span></p><h1 style="margin:0in;line-height:normal;"><span style="font-size:14pt;">About the role</span></h1><p class="MsoNormal" style="margin-bottom:0in;line-height:normal;"><span style="font-size:11pt;">We are seeking a manager to lead compliance and IT governance for Finance systems. This person will manage the Compliance and IT Governance team and oversee recurring IT controls, access governance, audit coordination, policies, vendor assurance, and remediation. The role works closely with Finance process owners, Financial Information Systems (FIS), Global Technology, Information Security, and auditors to keep controls effective and evidence ready for review.</span></p><h1 style="margin:0in;line-height:normal;"><span style="font-size:14pt;">Responsibilities</span></h1><p class="MsoListBulletCxSpFirst" style="margin-top:0in;margin-right:0in;margin-bottom:0in;margin-left:19.45pt;text-indent:-0.15in;line-height:normal;"><span style="font-size:11pt;font-family:Symbol;">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;"> </span></span><span style="font-size:11pt;">Lead the Finance IT general controls (ITGC) program, including user and privileged-access reviews, segregation-of-duties checks, audit-log reviews, and control certifications.</span></p><p class="MsoListBulletCxSpMiddle" style="margin-top:0in;margin-right:0in;margin-bottom:0in;margin-left:19.45pt;text-indent:-0.15in;line-height:normal;"><span style="font-size:11pt;font-family:Symbol;">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;"> </span></span><span style="font-size:11pt;">Coordinate review of IT application controls (ITAC), such as approval workflows, automated validations, system restrictions, and audit trails.</span></p><p class="MsoListBulletCxSpMiddle" style="margin-left:19.45pt;text-indent:-0.15in;"><span style="font-size:11pt;line-height:105%;font-family:Symbol;">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;"> </span></span><span style="font-size:11pt;line-height:105%;">Manage Finance FIS responses to internal and external IT-control audits; review supporting evidence, track findings, and coordinate remediation with control owners.</span></p><p class="MsoListBulletCxSpMiddle" style="margin-left:19.45pt;text-indent:-0.15in;"><span style="font-size:11pt;line-height:105%;font-family:Symbol;">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;"> </span></span><span style="font-size:11pt;line-height:105%;">Maintain governance policies, procedures, control schedules, evidence repositories, and risk or exception records for Finance systems.</span></p><p class="MsoListBulletCxSpMiddle" style="margin-left:19.45pt;text-indent:-0.15in;"><span style="font-size:11pt;line-height:105%;font-family:Symbol;">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;"> </span></span><span style="font-size:11pt;line-height:105%;">Obtain and assess relevant vendor SOC reports and bridge letters; identify complementary user entity controls and follow through with responsible teams.</span></p><p class="MsoListBulletCxSpMiddle" style="margin-left:19.45pt;text-indent:-0.15in;"><span style="font-size:11pt;line-height:105%;font-family:Symbol;">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;"> </span></span><span style="font-size:11pt;line-height:105%;">Provide control guidance for proposed Finance system and process changes while project and process owners retain delivery responsibility.</span></p><p class="MsoListBulletCxSpMiddle" style="margin-left:19.45pt;text-indent:-0.15in;"><span style="font-size:11pt;line-height:105%;font-family:Symbol;">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;"> </span></span><span style="font-size:11pt;line-height:105%;">Identify and implement approved improvements to compliance and control processes, including simpler review steps, clearer ownership, better evidence collection, and appropriate automation.</span></p><p class="MsoListBulletCxSpLast" style="margin-left:19.45pt;text-indent:-0.15in;"><span style="font-size:11pt;line-height:105%;font-family:Symbol;">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;"> </span></span><span style="font-size:11pt;line-height:105%;">Set priorities for the team, review the quality of its work, coach staff, and maintain backup coverage for critical activities.</span></p><h1 style="margin:0in;line-height:normal;"><span style="font-size:14pt;">Qualifications</span></h1><h1 style="margin-top:0in;margin-right:0in;margin-bottom:0in;margin-left:26.65pt;text-indent:-0.25in;line-height:normal;"><span style="font-size:11pt;font-family:Symbol;">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;"> </span></span><span style="font-size:11pt;font-family:Aptos, sans-serif;">Bachelor’s degree in Accounting, Finance, Information Systems, Information Technology, Business Administration, or a related field.</span></h1><p class="MsoListBulletCxSpFirst" style="margin-left:19.45pt;text-indent:-0.15in;"><span style="font-size:11pt;line-height:105%;font-family:Symbol;">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;"> </span></span><span style="font-size:11pt;line-height:105%;">At least seven years of relevant experience in IT controls, IT audit, technology risk, systems compliance, or IT governance, including hands-on ITGC work.</span></p><p class="MsoListBulletCxSpMiddle" style="margin-left:19.45pt;text-indent:-0.15in;"><span style="font-size:11pt;line-height:105%;font-family:Symbol;">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;"> </span></span><span style="font-size:11pt;line-height:105%;">At least two years of experience leading or supervising staff, including work review, coaching, and performance management.</span></p><p class="MsoListBulletCxSpLast" style="margin-left:19.45pt;text-indent:-0.15in;"><span style="font-size:11pt;line-height:105%;font-family:Symbol;">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;"> </span></span><span style="font-size:11pt;line-height:105%;">Experience supporting internal or external audits of financial systems and coordinating remediation with control owners.</span><i><span style="font-size:11pt;line-height:107%;"> </span></i></p><p class="MsoNormal" style="margin-left:19.45pt;"><i><span style="font-size:11pt;line-height:107%;">Preferred: CISA, CIA, CPA, or an equivalent professional certification; experience with SOX controls, ERP systems, or Finance SaaS platforms.</span></i></p><h1><span style="font-size:11pt;line-height:107%;"> </span><span style="font-size:14pt;">Technical skills</span></h1><p class="MsoListBulletCxSpFirst" style="margin-left:19.45pt;text-indent:-0.15in;"><span style="font-size:11pt;line-height:105%;font-family:Symbol;">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;"> </span></span><span style="font-size:11pt;line-height:105%;">ITGC and ITAC design, operation, and testing; user access and privileged-access reviews; segregation of duties; change management; and audit-log monitoring.</span></p><p class="MsoListBulletCxSpMiddle" style="margin-left:19.45pt;text-indent:-0.15in;"><span style="font-size:11pt;line-height:105%;font-family:Symbol;">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;"> </span></span><span style="font-size:11pt;line-height:105%;">Control documentation, risk and issue assessment, evidence management, audit responses, and remediation tracking.</span></p><p class="MsoListBulletCxSpMiddle" style="margin-left:19.45pt;text-indent:-0.15in;"><span style="font-size:11pt;line-height:105%;font-family:Symbol;">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;"> </span></span><span style="font-size:11pt;line-height:105%;">Review of SOC 1 or SOC 2 reports, bridge letters, and complementary user entity controls.</span></p><p class="MsoListBulletCxSpMiddle" style="margin-left:19.45pt;text-indent:-0.15in;"><span style="font-size:11pt;line-height:105%;font-family:Symbol;">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;"> </span></span><span style="font-size:11pt;line-height:105%;">Working knowledge of financial systems and the ability to analyze access listings, logs, control reports, and exception data using spreadsheets or reporting tools.</span></p><h1 style="margin:0in;line-height:normal;"><span style="font-size:14pt;">Skills and competencies</span></h1><p class="MsoListBulletCxSpFirst" style="margin-left:19.45pt;text-indent:-0.15in;"><span style="font-size:11pt;line-height:105%;font-family:Symbol;">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;"> </span></span><span style="font-size:11pt;line-height:105%;">People leadership: assigns and reviews work, coaches team members, develops backup coverage, and holds the team accountable for deadlines.</span></p><p class="MsoListBulletCxSpMiddle" style="margin-left:19.45pt;text-indent:-0.15in;"><span style="font-size:11pt;line-height:105%;font-family:Symbol;">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;"> </span></span><span style="font-size:11pt;line-height:105%;">Stakeholder management: works effectively with Finance, technology, process owners, vendors, and auditors and can follow up on actions across teams.</span></p><p class="MsoListBulletCxSpMiddle" style="margin-left:19.45pt;text-indent:-0.15in;"><span style="font-size:11pt;line-height:105%;font-family:Symbol;">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;"> </span></span><span style="font-size:11pt;line-height:105%;">Analytical thinking and judgment: identifies control gaps, evaluates practical risk, and recommends workable corrective actions.</span></p><p class="MsoListBulletCxSpMiddle" style="margin-left:19.45pt;text-indent:-0.15in;"><span style="font-size:11pt;line-height:105%;font-family:Symbol;">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;"> </span></span><span style="font-size:11pt;line-height:105%;">Communication and attention to detail: explains controls clearly, writes concise documentation, and checks the completeness and accuracy of evidence.</span></p><p class="MsoListBulletCxSpMiddle" style="margin-left:19.45pt;text-indent:-0.15in;"><span style="font-size:11pt;line-height:105%;font-family:Symbol;">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;"> </span></span><span style="font-size:11pt;line-height:105%;">Planning and ownership: manages a recurring control calendar alongside urgent audit requests and escalates significant issues promptly.</span></p><p class="MsoListBulletCxSpLast" style="margin-left:19.45pt;text-indent:-0.15in;"><span style="font-size:11pt;line-height:105%;font-family:Symbol;">·<span style="font-style:normal;font-variant:normal;font-size:7pt;line-height:normal;"> </span></span><span style="font-size:11pt;line-height:105%;">Continuous improvement: investigates recurring bottlenecks, proposes practical changes, and measures whether adopted changes improve timeliness or quality.</span></p><h1 style="margin:0in;line-height:normal;"><span style="font-size:14pt;">What success looks like</span></h1><p> </p><p class="MsoNormal" style="margin-bottom:0in;line-height:normal;"><span style="font-size:11pt;">Scheduled control reviews are completed on time with clear evidence; access and control exceptions are identified and resolved; audit requests receive accurate, timely responses; policies reflect actual practice; and the team can deliver recurring work consistently with appropriate review and backup coverage.</span></p>