Finance Systems Control Manager

Soldier On; Sydney; Hybrid; AUD 140,000 - 190,000; Full time

Benefits offered by this job

Hybrid working model

Location flexible across Australia

Job summary

Compass Group Australia seeks a Financial Systems Control Manager to design and embed ITGC and application controls supporting ICFR and UK governance requirements. You will document relevant applications, interfaces and ownership, and drive evidence standards with Technology, Cybersecurity and Finance partners.

In a hybrid setup, you will lead testing, remediation and governance reporting while building strong control routines for Line 1 ownership and ongoing assurance programs.

Qualifications

• 6+ years in IT controls, ITGC, risk, audit or SOX/ICFR readiness.
• Experience with IT control design, testing and remediation.
• Strong documentation, evidence and reporting capabilities.
• Stakeholder engagement across Technology, Cybersecurity and Finance.

Responsibilities

• Design and embed ITGC and application controls aligned to ICFR.
• Document financially relevant applications, interfaces and controls.
• Develop RACMs, test procedures and evidence standards.
• Lead change activities and ensure BAU control discipline.
• Monitor testing, remediation and governance reporting.

Skills

IT controls

ITGC

technology risk

IT audit

cybersecurity governance

SOX/ICFR readiness

stakeholder collaboration

Education

Information Systems degree

Computer Science degree

Accounting/Finance/Commerce degree

Professional certifications (CISA/CISM/CISSP/CRISC/CIA/CPA)

Tools

Power BI

SQL

Python

Oracle

BlackLine

GRC Optro

Job description

Drive financial systems controls across Compass Group Australia, partnering with key stakeholders to strengthen governance, compliance, and risk management

Description:

Finance Systems Control Manager
Location flexible across our office network, Perth WA or Sydney NSW

• Reporting to the National Manager Internal Audit & Control Assurance
• Hybrid working model (2 days working from home & 3 days working in the office)

Compass Group is listed on the London Stock Exchange (Top 20) and is the global market leader in providing food and support services to customers in the workplace, schools and colleges, hospitals, at leisure and in remote environments. We operate in over 25 countries, employ c.600,000 people, and are a recognised top 10 employer worldwide.

In Australia, Compass Group Australia (CGA) currently generates $2.2bn revenue per annum, servicing over 350 clients across over 700 sites, with c.18,000 employees. We offer a supportive team culture in a value-based organisation with balanced ‘work from home’ arrangements.

About the Role

The Financial Systems Control Manager is a key management role within the CGA Control Assurance & Audit (CAA) function. The role supports the design, implementation and embedding of a robust IT General Controls (ITGC), application controls and technology-enabled control framework that underpins internal control over financial reporting (ICFR), SOX-style readiness and UK Corporate Governance Code requirements.

The position will help establish a consistent, scalable and risk-aligned financial systems control environment across CGA by documenting financially relevant applications, interfaces, system dependencies, access management, change management, provisioning, monitoring, IPE and automated control requirements. This role will work closely with Finance, Technology, Cybersecurity, Group Risk and Control and Internal Audit to ensure system controls are designed, evidenced, tested, remediated and governed effectively.

A critical success factor for this role is practical change leadership. In partnership with CGA Technology teams, the Financial Systems Control Manager will translate technical ITGC, cybersecurity, compliance and audit requirements into clear business guidance and sustainable control routines for Line 1 system, application and process owners.

Responsibilities:

• Support the implementation and enhancement of CGA’s financial systems control framework, covering ITGCs, application controls and technology-enabled controls aligned to Group SOX-like internal controls over financial reporting (ICFR) framework.
• Develop and maintain clear documentation of financially relevant applications, interfaces, reports, dependencies, key configurations, access models, change processes and control ownership.
• Develop and maintain technology RACMs, control objectives, evidence standards and test procedures to reduce duplication while sustaining compliance and audit readiness.

Embedding ITGC / application control processes

• Partner with Technology, Data, Cybersecurity, and Finance application owners to design and document ITGC and application controls that are practical, risk-aligned and embedded into system lifecycle activities.
• Provide clear guidance and constructive challenge on control design, operating effectiveness, evidence quality, completeness, accuracy and ownership expectations.
• Translate technical ITGC, cybersecurity and compliance requirements into job aids, walkthrough materials and training for system owners, process owners and control performers.
• Support management of change activities that build Line 1 capability, reinforce ownership and embed system control discipline into BAU routines.

Testing, compliance monitoring and remediation

• Design and support testing of ITGCs, automated controls, application controls and technology-dependent IPE, covering design effectiveness, operating effectiveness and evidence quality.
• Perform or oversee verification of access reviews, change management, provisioning, monitoring activities, control documentation and evidence retention.
• Identify deficiencies, root causes, business impacts and remediation requirements, then track sustainable closure through clear reporting, metrics and evidence.

Governance, reporting and continuous improvement

• Prepare concise reporting on Finance systems ITGC and IT applications performance, control exceptions, remediation progress, evidence quality, issue themes, key risk indicators and emerging technology risks.
• Support effective use of the GRC system for process maps, control libraries, RACMs, testing, issue management and remediation tracking.
• Drive continuous improvement through automation, standardised evidence capture, data-led monitoring, process optimisation and alignment with Risk & Control Group Programme and CGA key stakeholders.

People leadership and capability building

• Develop good working relationships with fellow CAA team members to foster a culture of operational excellence, collaboration and professional challenge.
• Develop and maintain productive working relationships with key stakeholders, building trust while analysing, challenging and influencing constructively.
• Support the CGA Group Finance team and broader Finance team in ensuring the needs of key stakeholders are met while preserving CAA team integrity and independence.
• Operate in accordance with Compass values and actively support and participate in Compass culture.
• Model high standards of integrity, confidentiality, professional judgement and accountability.

About You

• Experience:
  • Minimum 6+ years’ experience in IT controls, ITGC, technology risk, IT audit, cybersecurity governance, compliance, SOX/ICFR readiness or related assurance disciplines, with hands-on exposure to financially relevant systems preferred.
• Qualifications:
  • Degree in Information Systems, Computer Science, Accounting, Finance, Commerce, Business or a related field; professional certification such as CISA, CISM, CISSP, CRISC, CIA, CA/CPA, ISO 27001, COBIT or ITIL is desirable.
• Technical capability:
  • Strong working knowledge of ITGCs, application controls, access management, provisioning, privileged access, segregation of duties, change management, interfaces, automated controls, IPE, key reports and relevant frameworks such as SOX 404 / ICFR, UK Corporate Governance Code, ISO 27001, NIST and COBIT.
• Documentation and assurance:
  • Demonstrated ability to document systems (configuration workflow, interface, etc), process flows, RACMs, test procedures, evidence standards and remediation plans with precision, consistency and audit-ready quality.
• Ability to work effectively with Technology, Cybersecurity, Data, Finance, Legal, Procurement, Internal Audit and External Audit stakeholders, communicating clearly with both technical and non-technical audiences.
• Business judgement:
  • Strong analytical, critical-thinking, planning and problem-solving skills, with high attention to detail and the ability to balance risk, compliance and practical business outcomes.
• Tools and integrity:
  • Familiarity with data analytics, scripting, automated monitoring, Power BI, SQL, Python, audit workpapers, Oracle, BlackLine, GRC Optro or similar platforms is advantageous.
• Demonstrates integrity, confidentiality and sound judgement.

We are committed to ensuring a recruitment process that is fair, inclusive, and accessible to all. If you require any adjustments or alternative methods of communication during the process, please let us know—our team will support you in the way that works best for you.