We are Hiring: IT SOx & Control Assurance Lead

Location: Remote

Hours: Monday to Friday 09 00 to 17 30

About the Role

We are seeking an experienced IT SOx & Control Assurance Lead to take ownership of the enterprise IT controls framework within a regulated financial services environment.

This is a senior, high-impact role responsible for setting the strategic direction for General Computer Controls (GCCs) and strengthening the wider IT control environment. You will partner closely with Technology, Risk, Compliance, and Finance stakeholders to ensure a robust, sustainable, and audit-ready control framework.

You will play a key role in driving accountability, influencing remediation priorities, and continuously improving control maturity across the organisation.

Key Responsibilities

SOx Controls and Governance

Lead the IT SOx controls framework, with ownership of GCCs and oversight of technology control environments
Define and maintain the Risk and Control Matrix (RACM), ensuring alignment to systems, processes, and regulatory requirements
Continuously enhance the IT control framework to support sustainable SOx compliance

Stakeholder Management

Drive senior engagement and accountability across technology teams
Partner with Technology, Risk, Compliance, and business stakeholders to strengthen control effectiveness
Promote awareness and understanding of SOx controls and responsibilities across the organisation

Audit and Assurance

Act as the primary lead for internal and external audit engagement on IT SOx matters
Ensure audit readiness, including documentation, walkthroughs, and evidence management
Manage audit responses and ensure timely resolution of findings

Issue Management and Remediation

Oversee governance and resolution of IT SOx control findings
Develop and drive pragmatic and sustainable remediation plans
Ensure issues are resolved with appropriate evidence and audit validation

Segregation of Duties (SoD)

Provide oversight of SoD controls across systems and applications
Ensure effective governance of access, roles, and conflict management
Drive timely resolution of access-related risks and control gaps

Skills and Experience

Essential

Strong experience in SOx compliance, with a focus on General Computer Controls (GCCs)
Broad technical understanding of IT environments, including identity and access management, change management, cloud platforms, and infrastructure
Proven experience designing, implementing, and improving IT control frameworks
Ability to influence and challenge senior stakeholders to drive control improvements
Strong communication skills, with the ability to translate complex technical risks into clear business outcomes

Desirable

Background in IT audit (internal or external)
Professional certifications such as CISA (preferred), or CISM, CRISC, CISSP
Knowledge of control frameworks such as COBIT, ISO 27001, and NIST
Experience with GRC tools and evidence management platforms

Why Join Us

At Kensington Mortgages, we believe our people are at the heart of our success. We are committed to creating a supportive, flexible and inclusive environment that enables both personal and professional growth.

We actively promote wellbeing, development and work life balance, and value diversity of thought, background and experience across our teams.

Kensington Mortgage Company

Latest Jobs

IT SOx Manager