Security Controls Manager

Senior Risk and Controls Manager - Remote - Up to £85,000 + Bonus

My client is looking for a seasoned Controls professional with deep expertise in Governance, Risk and Compliance (GRC), particularly within SAP-based environments. This role suits someone who understands how effective controls support both regulatory compliance and wider business objectives, and who is confident advising senior stakeholders on risk, controls, and governance matters.

Key Responsibilities

• Develop, implement, and evaluate internal control frameworks, with a strong focus on SAP-enabled systems.
• Act as a lead advisor in client discussions covering GRC strategy, compliance requirements, and optimisation of control environments, including ITGCs, ITACs, and key ICFR controls.
• Provide subject matter expertise on regulatory obligations such as Sarbanes-Oxley (SOX) and UK Corporate Reform (Provision 29), translating requirements into practical, value-driven solutions.
• Lead, coach, and support junior consultants and analysts, fostering a collaborative and high-performing team culture.
• Contribute to business development activities, including opportunity scoping, proposal writing, and participation in client pitches across the sales lifecycle.
• Build and maintain strong, long-term client relationships, positioning yourself as a trusted advisor in controls and compliance.

Core Behaviours

• Focused on the purpose and value behind solutions, not just their technical execution.
• Strong client-first mindset, with a proven ability to align work to client priorities.
• Passionate about evolving risk and controls into a function that enables business growth rather than just compliance.
• Confident in building effective relationships with stakeholders at all levels, both internally and externally, in a hybrid working environment.

Skills & Experience

• Extensive experience designing, implementing, and testing GRC controls, ideally within SAP ERP landscapes.
• Strong background in IT General Controls (ITGCs) and IT Application Controls (ITACs).
• Solid understanding of financial compliance frameworks, including SOX and UK Corporate Reform (Provision 29).
• Knowledge of core finance processes and related ICFR controls.
• Proven ability to lead engagements and communicate clearly with senior management.
• Experience managing and mentoring team members.
• Exposure to the consulting sales cycle, including bid support and opportunity development.
• Excellent analytical, communication, and organisational skills.

Desirable Experience

• Professional qualifications such as CISA, ACA, ACCA, or similar.
• Background in risk advisory, internal controls, or a top-tier consulting environment.
• Experience with emerging risk and controls capabilities, including automation, data analytics, and AI-driven solutions.