Lead and manage a blended team delivering application security and controls services across QXO’s enterprise applications, ensuring governance, compliance, and operational effectiveness.
Compensation
Base pay range: $101,070 - $202,200
Annual performance bonus
Responsibilities
Lead and develop a blended team of employees, contractors, and consultants delivering application security and controls services
Own people management for direct reports, including hiring, onboarding, goal setting, performance management, coaching, career development, and recognition
Manage contractors and consultants end to end, including defining resource needs, scoping work and statements of work, onboarding and access, directing day-to-day work, reviewing deliverables, and managing performance and offboarding
Plan team capacity and resourcing, balancing employee, contractor, and consultant staffing against project demand, operational support needs, and budget
Own Oracle Fusion Cloud security architecture and role design, including job roles, duty roles, privileges, data roles, data access, and role hierarchies across enterprise application environments
Work across a portfolio of IT audit, technology assurance and advisory engagements, focusing on technology risk, controls, cyber, cloud, data, and AI governance.
Responsibilities
Plan and coordinate assigned engagement workstreams
Develop understanding of client’s business, technology environment and risk landscape
Perform and review technology risk and control assessments
Assess significance and business implications of identified risks
Develop clear, evidence-based findings and practical recommendations
Lead and execute technology audit, regulatory compliance, operational resilience, and technology risk management engagements within the financial services and other regulated sectors.
Locations (2)
Kochi, Kerala, India
Thiruvananthapuram, Kerala, India
Responsibilities
Lead regulatory compliance assessments against applicable banking, financial services, cybersecurity, operational resilience, and technology risk regulations
Perform regulatory gap assessments and compliance reviews across technology, cybersecurity, cloud, payment systems, data management, and third-party risk domains
Support regulatory examinations, inspections, and remediation programs
Track and validate remediation of regulatory findings, audit observations, and management action plans
Interpret new regulatory requirements and assess their impact on technology and business operations
Requirements
Bachelor’s degree in Technology, Finance, Accounting, or a related discipline
IT SOX Manager
Coca-Cola Europacific Partners (CCEP) · Posted Nov 12, 2026
Join CCEP’s IT Risk & Compliance team and help protect the digital ecosystem of one of the world’s leading FMCG organisations. You’ll collaborate with colleagues across multiple countries, work closely with diverse business and technology teams, and contribute to strengthening CCEP’s internal control environment.
Responsibilities
Managing end‑to‑‑end SOX compliance for IT General Controls across all CCEP markets.
Overseeing control execution, evidence quality, remediation activities, and closure tracking.
Leading SOX audits, working closely with internal and external auditors.
Driving annual scoping activities, walkthroughs, documentation updates, and IT risk/control evaluations.
Ensuring transformation projects and system integrations meet SOX and internal compliance requirements.
We are seeking an experienced QA Analyst with a strong background in financial applications and ERP systems, particularly NetSuite. The ideal candidate will be responsible for ensuring the accuracy, reliability, and compliance of financial processes during system implementations, integrations, and enhancements.
Responsibilities
Verify financial transactions, general ledger postings, account reconciliations, reporting outputs, and migrated financial records.
Perform end-to-end testing of integrated business processes between Salesforce and NetSuite, with emphasis on quote-to-cash functionality.
Evaluate financial system controls in accordance with SOX and IT General Controls (ITGC) requirements.
Maintain detailed test documentation, validation results, and supporting evidence for internal and external audits.
Assist with deployment readiness, data cutover, production launch, and post-implementation support, including the initial month-end closing cycle.
Lead the design and implementation of IT audit and controls methodology, manage end-to-end IT audit delivery, and advise senior leadership on IT risk and controls.
Responsibilities
Design and implement internal audit and controls methodology aligned with IIA Standards
Lead the IT audit plan and manage end-to-end delivery of audits and reviews
Ensure fit-for-purpose IT control framework and monitor controls
Act as trusted business partner and advisor on IT risk and controls
Draft high-quality reports and track remediation of control issues
Requirements
IT Audit (CISA)
IT Security (CISM, CISSP)
Nice to have: Familiarity with AI tools and frameworks
Participation in advisory and audit projects for our SAP clients in Poland, Central Europe and/or globally. Designing and building security frameworks and authorization models in S/4HANA, SAP ECC and other SAP technologies (incl. SAP Fiori). Designing SAP Security policies, standards and controls to manage technology risks in SAP environment. Advising on setting up relationships between IT and business functions. Providing advice related to ensuring compliance with regulatory requirements with a special focus on SAP technology.
Responsibilities
Participate in advisory and audit projects for SAP clients
Design security frameworks and authorization models in S/4HANA, SAP ECC and other SAP technologies
Design SAP Security policies, standards and controls
Advise on setting up relationships between IT and business functions
Provide advice related to ensuring compliance with regulatory requirements
Operations Risk Analyst responsible for responding to client risk events involving Operations and Technology processes, leading complex event responses, and creating key risk metrics for board reporting.
Responsibilities
Coordinate the end-to-end response to potential client impacting operational and technology events, including triage, materiality assessment, stakeholder mobilization, escalation, investigation, client-support information and closure.
Act as the central coordinator during time sensitive events, bringing together Operations, Technology, Investment, Client Group, Legal, Compliance and Risk subject matter experts as appropriate.
Ensure event summaries are accurate, concise and decision useful, clearly distinguishing facts, client impact, root causes, control failures, remediation, residual risk and lessons learned.
Facilitate robust root cause and contributing factor analysis, challenge whether proposed actions address the underlying issue, and support clear ownership and timely closure of remediation.
Provide independent risk challenge while preserving constructive relationships with first line process and control owners.
Lead complex advisory engagements focused on business process transformation, governance, risk management and data-driven decision making within EY’s Data & Intelligence team.
Compensation
Een passend salaris voor je rol en verantwoordelijkheid, afhankelijk van ervaring en kwalificaties. Plus, een goed pensioen. Bovenop je salaris ontvang je ook vakantiegeld en een jaarlijkse bonus (afhankelijk van resultaten en ontwikkeling).
Responsibilities
Lead complex advisory engagements
Act as trusted advisor to senior stakeholders
Oversee design and improvement of business processes and control frameworks
Lead data analysis initiatives
Drive development and implementation of dashboards and monitoring solutions
Requirements
Bachelor's or Master's in Business Economics, Business Administration, Business Analytics, Information Management, Accounting, Computer Science, Data Science or a comparable quantitative field
Manager, Enterprise Application Security & ControlsNewQXO · Seattle, US
Senior Associate, Technology AssuranceNewEY · Global
IT SOX ManagerNewCoca-Cola Europacific Partners (CCEP)
IT Internal Audit & Controls Manager/Senior ManagerNewMonks · London, United Kingdom
Technical Risk Governance & Compliance SpecialistEbury · Madrid, Spain