I'm currently recruiting for an exciting Vice President-level opportunity within IT Risk & Controls, with a particular focus on Identity Governance and Segregation of Duties (SoD).
This is a key role within a growing technology risk and controls environment and will play an important part in the implementation and ongoing operation of a new Segregation of Duties capability.
What will you be doing?
🔹 Owning the governance and oversight of business rules within the SoD engine
🔹 Working closely with SoD rule owners and role owners to ensure clear accountability and effective control ownership
🔹 Managing and overseeing SoD acceptance, validation and governance processes
🔹 Owning SoD metrics, reporting and control governance activities
🔹 Ensuring SoD rules and controls are regularly reviewed, tested and validated
🔹 Acting as a key point of contact for Internal Audit and IT Controls
🔹 Supporting audit activity and providing evidence that controls are operating effectively and are appropriately governed
🔹 Working across the wider Identity Governance & Administration (IGA) environment
🔹 Supporting the interaction between SoD controls, access governance and wider identity lifecycle processes
🔹 Collaborating with stakeholders across Technology, Risk, Controls, Audit and the Business
What we're looking for:
✅ Strong experience within IT Risk & Controls, Technology Risk or IT Governance
✅ Experience with Segregation of Duties (SoD) and access-related controls
✅ Exposure to Identity Governance, IGA, IAM or Access Governance
✅ Strong understanding of control frameworks, governance, validation and assurance
✅ Experience working with Internal Audit, IT Audit and IT Controls
✅ Experience managing control owners, evidence and audit requirements
✅ Strong stakeholder management skills and the ability to operate in a complex, regulated environment
✅ Financial Services experience would be highly advantageous
This is an excellent opportunity for someone who enjoys operating at the intersection of Technology Risk, IT Controls, Identity Governance and Audit, taking ownership of a critical control capability and helping shape its ongoing governance and operating model.