IT Controls and NFR Manager

Matchtech; Greater London; On-site; GBP 94,000 - 157,000; Full time

Job summary

Matchtech is seeking an IT Controls (ITGC/ITAC) & NFR Manager to support a SAP S/4HANA transformation in London. You will own the controls readiness workstream and drive NFR delivery across design, build, testing, cutover and go-live, on-site.

The role focuses on IT general controls, application controls, SOx readiness, and NFRs for SAP programs, working with control owners, programme leadership, SAP teams, security, and external auditors.

Qualifications

• 5+ years of IT risk / IT controls experience.
• Hands-on SAP implementations/rollouts, ideally S/4HANA.
• Solid knowledge of ITGCs, ITACs and SOx-style environments.
• Experience reviewing SOC reports and third-party assurance.
• Translate technical control issues into plain-English business risk.

Responsibilities

• Lead IT controls management across the programme to ensure audit-ready / SOx-aligned outcomes through go-live.
• Partner with control owners, programme leadership, SI partners, SAP teams, security, internal audit and external auditors.
• Own the inventory of controls, risks, deficiencies, remediation actions and evidence.
• Drive the definition, design, testing and release of NFRs including IAM, Segregation of duties, vulnerability management, resilience & disaster recovery.
• Coordinate controls and readiness activities for data migration, reconciliation, validation, cutover and go-live.
• Produce clear status reporting and escape material risks via governance forums.

Skills

IT risk management

IT controls

S/4HANA experience

SOx / audit readiness

Communicating risk to stakeholders

Job description

IT Controls (ITGC/ITAC) & NFR Manager (SAP S/4HANA programme)
A global organisation is looking for an experienced IT Controls & Non‑Functional Requirements (NFR) Manager to support a major SAP S/4HANA transformation. You'll own the controls readiness workstream and drive NFR delivery (particularly security and resilience) across design, build, testing, cutover and go‑live.

Key details

• Engagement: Contract
• Location: London, UK (on-site requirement)
• Rate: Up to £850/day
• Focus: IT General Controls (ITGC), IT Application Controls (ITAC), SOx/audit readiness, NFRs for SAP programmes

What you'll be doing

• Lead IT controls management across the programme to ensure audit-ready / SOx-aligned outcomes through go‑live.
• Partner with control owners, programme leadership, SI partners, SAP teams, security, internal audit and external auditors.
• Own the inventory of controls, risks, deficiencies, remediation actions and evidence.
• Drive the definition, design, testing and release of NFRs, including:
  • Identity & access management
  • Segregation of duties / privileged access
  • Vulnerability management
  • Resilience & disaster recovery
• Coordinate controls and readiness activities for data migration, reconciliation, validation, cutover and go‑live.
• Produce clear status reporting and escape material risks via governance forums.

What we're looking for

• Strong background in IT risk / IT controls / assurance (typically 5+ years).
• Hands‑on experience with SAP implementations/rollouts (ideally S/4HANA).
• Solid knowledge of ITGCs, ITACs, internal control frameworks, SOx-style environments.
• Experience assessing outsourced IT operations and reviewing SOC reports / third‑party assurance.
• Confident translating technical control issues into plain‑English business risk for senior stakeholders.

Nice to have

• Experience using data analytics to spot anomalies and control weaknesses.
• Comfortable working directly with external auditors.