IT Controls (ITGC/ITAC) & NFR Manager (SAP S/4HANA programme)
A global organisation is looking for an experienced IT Controls & Non‑Functional Requirements (NFR) Manager to support a major SAP S/4HANA transformation. You'll own the controls readiness workstream and drive NFR delivery (particularly security and resilience) across design, build, testing, cutover and go‑live.
Key details
- Engagement: Contract
- Location: London, UK (on-site requirement)
- Rate: Up to £850/day
- Focus: IT General Controls (ITGC), IT Application Controls (ITAC), SOx/audit readiness, NFRs for SAP programmes
What you'll be doing
- Lead IT controls management across the programme to ensure audit-ready / SOx-aligned outcomes through go‑live.
- Partner with control owners, programme leadership, SI partners, SAP teams, security, internal audit and external auditors.
- Own the inventory of controls, risks, deficiencies, remediation actions and evidence.
- Drive the definition, design, testing and release of NFRs, including:
- Identity & access management
- Segregation of duties / privileged access
- Vulnerability management
- Resilience & disaster recovery
- Coordinate controls and readiness activities for data migration, reconciliation, validation, cutover and go‑live.
- Produce clear status reporting and escalate material risks via governance forums.
What we're looking for
- Strong background in IT risk / IT controls / assurance (typically 5+ years).
- Hands-on experience with SAP implementations/rollouts (ideally S/4HANA).
- Solid knowledge of ITGCs, ITACs, internal control frameworks, SOx-style environments.
- Experience assessing outsourced IT operations and reviewing SOC reports / third‑party assurance.
- Confident translating technical control issues into plain-English business risk for senior stakeholders.
Nice to have
- Experience using data analytics to spot anomalies and control weaknesses.
- Comfortable working directly with external auditors.
